last executing test programs: 4m29.352361285s ago: executing program 2 (id=1164): r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 4m29.268157243s ago: executing program 2 (id=1165): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100, 0xbd}, {0x0, 0x0, 0x0, 0x0, 0x800000000}, {0x0, 0x0, 0x1000000000000000}}, {{@in=@multicast2, 0x4d4, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000001000/0x4000)=nil, 0x1000, 0x2000008, 0x12, r3, 0x83000000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r2, @ANYBLOB="0517"], 0x0) 4m27.720093516s ago: executing program 2 (id=1170): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="2100000000040000240012800b000100677265746170"], 0x44}}, 0x0) 4m25.435521655s ago: executing program 2 (id=1173): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x40000800000001fe, 0x802) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf7, 0x9, 0xf8, 0x20, 0x1a0a, 0x103, 0xa086, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x72, 0x7f, 0x0, 0xcb, 0xf1, 0xf6, 0xe8}}]}}]}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x19f}}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, r6, 0x5, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x400dbb4c165ec8c7}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x800) fchmod(r0, 0xbf) 4m21.758237104s ago: executing program 2 (id=1202): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{0x1, 0xd}, 0x1}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0xfe, 0x8000}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x8}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x1}, @connect={{}, {0x0, 0xfd}}}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue={0x0, {0x0, 0xd000000}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) 4m21.417312339s ago: executing program 2 (id=1207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x40}}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) 4m21.133115381s ago: executing program 32 (id=1207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x40}}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) 8.39158951s ago: executing program 0 (id=2484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000800)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}]}, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000600)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xdddd0000, 0x4, 0x9e, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x8080000, 0x3, 0x5, 0xc2, 0xc0, 0x9, 0x66, 0xc5, 0x7, 0x30, 0x40}, {0x60000, 0x58000, 0xf, 0x7, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0x80a0000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9, 0xf}, {0x504ce1cb89483871, 0x1000, 0xa, 0x8f, 0x80, 0x2, 0x9, 0x3, 0x1, 0x8, 0x4, 0x6}, {0xdddd1000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0xf8, 0xd}, {0xf7f71000, 0x100000, 0x10, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xeeee0000, 0x5000, 0x9, 0x6, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x8}, {0xe000, 0x59}, {0x4, 0x6}, 0x10000, 0x0, 0x1, 0x161, 0x3, 0x1000, 0xdddd1000, [0x8, 0x2, 0x3, 0x3]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) r7 = syz_open_dev$video4linux(&(0x7f0000000280), 0x8, 0x101000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000300)={0x1, 0x9, 0x1}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x7, 0x0, 0x0, 0xfffffffb, 0x9, 0x6, 0x6}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r8, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x8, 0x2}, 0x8) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f0000000040)={0x10000, 0xeeee0000, 0x40, 0x1, 0x6}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x6e0}]}) 7.947824472s ago: executing program 3 (id=2487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) syz_io_uring_setup(0x598, &(0x7f0000000240)={0x0, 0x2000b728, 0x3180, 0x8000, 0xb}, &(0x7f0000000180), &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000100000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) 7.533609574s ago: executing program 0 (id=2491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000001140)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x4, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x7, 0x108000, 0x3c, 0x2, 0xfffffffffffffffe, 0x2004cc, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x5, 0x7, 0x8, 0x0, 0x2, 0xfffffffffffffffd, 0x1], 0x8083000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.427037653s ago: executing program 1 (id=2493): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0xe, 0x85, {0x85, 0x7, "c24ada5fa95de2d183e20be5550d468f7b2a84b8bcc0509194328e889f98b4562cac485cac46976f0a68661f82a15bc3f89ceb345923372e7948b3cac4fc3cf2e5fbab1ce03eef3e7ed2f092634ab278059510f11f09ca187876d7d8abc8a516f11a1c649390aa43327b7f2e52d00a95c7375599e6d0caae9e04fbf2396805955402d6"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x204}}}, &(0x7f0000000340)={0x34, &(0x7f0000000180)={0x0, 0x17, 0x65, "f9837612f854c040b27a93df1f7600d2c82ed8470efefe30a2462991819c1bef5d626a647d7162b7625b04f567877c2b18d5429bd86c3f98706982c186546197b38ec3b86b1cc6231ed50ea6908959055da4684cddb65af69c4521a72dd586faf3186d66fe"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000280)={0xc0, 0xa1, 0x6, 0x80000000}, &(0x7f00000002c0)={0x40, 0xa0, 0x4, 0xc}, &(0x7f0000000300)={0xc0, 0xa2, 0x2f, "dba1db431cd9ea152fa8c980b2eaae382484348040ed5a756f339fd7f7e12843e14c6d159aec1441f415a847a57eb9"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.969209444s ago: executing program 5 (id=2497): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xc}) r2 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0xd, "0062ba7d820700000000000000000000096304"}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0xdacc, 0x8000000, {"ab2a4f21faeebdad8404bf9400000008"}, 0x8, 0x7, 0x2}}}, 0xa0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x9d}, @exit], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000b40)={0x21, r3, 0x3}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000b80)={0xffffffffffffffff, 0x2, 0x3, r7}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x0, 0x5, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x68, 0x0, 0x3, 0x2f, 0x0, @broadcast, @local, {[@noop]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r8, &(0x7f0000000b00)={&(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000840)="1f98f4e72d8effdc1f8ff7d3ac051fd84309a95d9d90948127fadd5211c2665c6a99d85966da5d67daa0d9a9b434b7ff1481399368b80fe6a47080de2145363023bb350e0c3dea2ef6edf96800c450af3283987e6b4bb6dca543372ceb4daa8334177f898aef3e9c0282462f98393efca5a5f17a1b0627f45df50cb26bb6b441b06f5ca78aef1c0f994cc74380139cb95514a53adf0d5834e71761c3154fafb0e97fa7a192edf14cbaa528f0c308ed4e9c379cc6b1941d71f262427a89832902dd5b", 0xc2}, {&(0x7f00000002c0)="0b1eb5df9b1344bb964f8c9c7b3e15b08cefa8f4c7ded567b0b6e813cd8c92e2d36097", 0x23}], 0x2, &(0x7f00000009c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x94, 0x6, "5ec29f1e"}, @timestamp_prespec={0x44, 0x1c, 0x5c, 0x3, 0x6, [{@local, 0x5}, {@multicast2, 0xfffffffb}, {@rand_addr=0x64010100, 0x8}]}, @ssrr={0x89, 0x7, 0x9c, [@empty]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010101, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x118}, 0x4008844) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0xb0, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xac, 0x6, 0xfe}}}}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xa}}}, 0x24}}, 0x0) 6.360380148s ago: executing program 0 (id=2499): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) lsm_list_modules(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000c000) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x1, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84) fcntl$setlease(r6, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fedbdf25010000000000000001410000001800170000000f0000000169623a6970366772653000001b5df9e5b62b5f2df8fa6f976109e04586162a01d08c247da65142f53a5389e3df4693d37df04e2b81f5d1963e0dc9573de4cefea2f2c8f6dafce2f63a28c457f66e041eb5c458f73b531584ab7f8287831f73dae1fd28d23b155d93c81a3184f162e62b11ed734d6f4b23628e840be094b9bd28063441d2df1dadc85a599bf41da35c7191fa5643897d5195e0edd3e89ff75686dfe54b475430c0db67dc23544b8ef7cce3b12733321372713b9555fb7e762da4a35aa5ae5aea17f0007d7717"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r8, 0x0, 0x16, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x7d) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r10 = accept4$alg(r9, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) sendmmsg(r10, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="ddbab91cd1723158240542969cd80e25", 0x10}], 0x1}}], 0x1, 0x48000045) io_submit(r11, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r10, &(0x7f0000000080)='=', 0x11}]) 6.286147913s ago: executing program 3 (id=2500): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600), 0x141000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f00000000c0)={0x80000001, 0x3, 0x2}, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000640)={0x39, 0x1}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0x2f, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) 6.154814918s ago: executing program 3 (id=2501): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d311000010010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2c, &(0x7f000000cf3d)=""/195}, 0x23) fcntl$setstatus(r1, 0x4, 0x42000) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014002000000005000500020000000500010006"], 0x6c}}, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000480)={r5, 0x8, &(0x7f00000002c0)=[0xa, 0x400, 0x6, 0x0, 0x9, 0xfff, 0x1, 0xfffffff7], &(0x7f0000000300)=[0x0, 0x2, 0x8, 0xffffffff, 0x2, 0xe], 0x50, 0x1, 0x79a9, &(0x7f0000000380)=[0x7fd4e20b], &(0x7f0000000440)=[0xda9, 0x8, 0x9]}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000180)={0x1, 0x3, [0xbc8, 0x1df, 0x854, 0xc5e]}) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r9, &(0x7f0000000100)=ANY=[], 0xfce1) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'geneve0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 5.991508154s ago: executing program 0 (id=2503): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffd}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x38}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x0, 0x3c}}}}}}}]}}, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000140)=@in={0x2, 0x0, @remote}, &(0x7f0000000000)=0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4089d}, 0xc010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) mount_setattr(r9, &(0x7f0000000080)='./file0\x00', 0x9000, &(0x7f00000000c0)={0x82, 0x74, 0x40000}, 0x20) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r7, r10, 0x0, 0x20000023896) ioctl$TCXONC(r7, 0x540a, 0x0) fallocate(r7, 0x9, 0x5, 0x7) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) r12 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f0000000100)={"7078f3fbc8248a61bc6744ab60667dacb517e5e04a42c16452cb997e37bb2411", r12}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000004c0)={0x20, 0x31, 0x1d, "1294e83664a3568896931aa3b557594721d8ce1a0e7ff7560db1beb5a5"}, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x100, 0x8, [0xf00]}}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0xb, 0x2, "ea43"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x3}, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x19, 0x2, "2af2"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0x21, 0x1}}) 5.300089735s ago: executing program 3 (id=2505): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ea7, 0x907, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c20000010000108000000000000001000000000", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) read$char_usb(r2, &(0x7f0000000180)=""/133, 0xfdef) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff000000000200000001000007000000000800090047000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x4}, @in6=@loopback, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x5c}, {0x9, 0x800000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {0x0, 0x3, 0xfffffffffffffffd, 0x40000000000}, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3ffffe}}, 0xe8) close(r5) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1) ioctl$KVM_X86_SETUP_MCE(r11, 0x4008ae9c, &(0x7f0000000280)={0x8, 0x4, 0x4}) ioctl$KVM_X86_SET_MCE(r11, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x80a0000, 0xfffffffffffffffd, 0x2, 0x3}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xf, "4ba06b6e"}]}}, 0x0}, 0x0) fcntl$setflags(r4, 0x2, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x5, &(0x7f0000000240), &(0x7f00000002c0)=0x4) 4.899445211s ago: executing program 1 (id=2508): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 4.885659809s ago: executing program 1 (id=2509): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) process_vm_writev(0x0, &(0x7f0000001c80), 0x44, 0x0, 0x0, 0x0) (async) process_vm_writev(0x0, &(0x7f0000001c80), 0x44, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000100)={'\x00', 0xb, 0x3}) (async) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000100)={'\x00', 0xb, 0x3}) add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x2080, 0x5}) creat(&(0x7f0000000240)='./bus\x00', 0x0) (async) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000340)="a4", 0x1}], 0x1, 0x9, 0xffdffffc, 0x4) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) sendto$inet(r1, 0x0, 0x0, 0x4004084, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) (async) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x4}, 0x0, 0xfffffffffffffffc) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000240)={0x40, 0x0, '\x00', {0x0, @bt={0x6, 0x5, 0x1, 0x0, 0x2, 0x10000, 0xa, 0x8, 0x100007, 0x4, 0x2, 0x1, 0x6ac, 0x43cb, 0x4, 0x6, {0x85a6, 0x1}, 0xb2, 0x81}}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x5, 0x3fc, 0x1, 0x12, 0x4, 0x7d}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x5, 0x3fc, 0x1, 0x12, 0x4, 0x7d}, 0x9c) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004080)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x5, {0x0, 0x1, 0x0, {0x3, 0x1, 0x7682, 0x400000000f91c, 0x400000006, 0x7659, 0x5250, 0x7, 0xe000, 0x4000, 0xcd35, 0x0, 0xffffffffffffffff, 0x100a, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004080)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x5, {0x0, 0x1, 0x0, {0x3, 0x1, 0x7682, 0x400000000f91c, 0x400000006, 0x7659, 0x5250, 0x7, 0xe000, 0x4000, 0xcd35, 0x0, 0xffffffffffffffff, 0x100a, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.877680296s ago: executing program 5 (id=2512): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000ff8000080007"], 0xa0}}, 0x0) 3.828584968s ago: executing program 1 (id=2513): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/pm_trace_dev_match', 0x0, 0x32) read$dsp(r4, &(0x7f0000000240)=""/143, 0x8f) socket$l2tp(0x2, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f00000003c0)=0x2, 0x4) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200010000000000000000001c0000000c00350000000000000000000c00"], 0x83}], 0x1}, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="803ae40f", @ANYRES16=r8, @ANYBLOB="1709001000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3.7836012s ago: executing program 5 (id=2514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x40}}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2, 0x0, 0x0, 0xf401}, 0x5) 3.562949468s ago: executing program 5 (id=2516): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009041800010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x13, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x77359400}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0x1, 0x3, 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'geneve1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d1}, 0x20008000) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3.495821526s ago: executing program 4 (id=2517): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) r3 = syz_io_uring_setup(0x2de5, &(0x7f0000000140)={0x0, 0x980a, 0x2, 0x400002, 0xc5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) (fail_nth: 93) 3.111545279s ago: executing program 4 (id=2518): syz_clone(0x100, &(0x7f0000000500)=',', 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYRESOCT], 0x44}}, 0x40040c4) 2.85077129s ago: executing program 0 (id=2519): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 2.809328353s ago: executing program 4 (id=2520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x10) r1 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3fffffffffffc) r3 = socket$alg(0x26, 0x5, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r6 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0xc}) r7 = dup(r5) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0xd, "0062ba7d820700000000000000000000096304"}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0xdacc, 0x8000000, {"ab2a4f21faeebdad8404bf9400000008"}, 0x8, 0x7, 0x2}}}, 0xa0) r8 = syz_open_pts(r5, 0x82080) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0x8000, 0x3e, 0xe, 0xffffffed, 0x9, "135825f1a6c5e1dd7700000000000000000040"}) dup3(r8, r5, 0x80000) read(r5, &(0x7f00000005c0)=""/228, 0xe4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0402006963fd08d79375711add78bca3c7ac09f15a24ddcd64ede201000000d94c2add2b5401ebdb16630386a82aabd2edee17d528591562f77cf314d94800f9f39b886310e3b2ca5f74785b8926da11e99100"/92, 0x5c}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1", 0x55}], 0x3}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000000850008006a0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000900)="0f01d1c4a17de733440f090f20d835080000000f22d836400f230b44de61140f320f09b9dd0800000f32c4626dbcfd", 0x2f}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 2.647220979s ago: executing program 0 (id=2521): r0 = syz_usb_connect(0x0, 0x516, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0x4f, 0xdf, 0x2e, 0x20, 0x1004, 0x61aa, 0xd1f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x504, 0x2, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x7a, 0x7, 0xf, 0x2, 0x6, 0x0, 0x1, [@hid_hid={0x9, 0x21, 0x3, 0xf, 0x1, {0x22, 0x4c8}}], [{{0x9, 0x5, 0x1, 0x0, 0x10, 0x1, 0x74, 0x0, [@generic={0x85, 0x1, "ce374208843b44f255991cd71fb807fd88eca5614cdd6b9e28bcb3d47c85970af772fe0308df86cc6a8171921b0cf2faaedfc54c72bdeabfb06784c6945268828e1d167fc7c32edcda0a5ab347b78e1059bfd7c38e78fb299fc321103316966733277d2862d27649e8b4054f1c8237c7508b11f8e510ec33e23f7f7cb3e6e030be618e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf9, 0x2}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3e7, 0x3, 0x4}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0x0, 0x5, 0x3, [@generic={0x5b, 0x31, "d05185e88258b6dff1dd00b67322ab97c3096dc1741d7ce9690eddde44334f7d8d5c5cd8112bb1947f8b27b2df0a23b9b0963d1bf1b85ca1214799384a59bf6be937b37d1283cf335c7155dfe82f781d3fc5c116a2065d069d"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x2, 0x4c, 0xa7}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0xe6, 0xcb}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x9, 0x9d, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xf4}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x8, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb, 0x4}, @generic={0xb2, 0x4, "f5ac34ab143179a7da0a34fefeaddee786090dd52c6a70524c94e789264b886a6a4df4d4a851b55707218392a8a05da1ecddf49a031b580b29aaa0d70b798bb735ca459406c7d3dc6581d1d6b2e0b0e831b2e7b7ffe7298adc62da3ab9f77125ea984c61338eadb64994b5cf57b44b61c94b830e1f6b8d576ab7d2b04de9cd74a104223166b41c2b734cbc0535a2170382bd05651a9db61713c891513ff0d96542f453e1307cc292b42ca1365daa67cc"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3d7, 0x9, 0xc, 0x40}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0xca, 0x7, 0x80, [@generic={0x4b, 0x24, "04eb49e2d451ba80c8281e6eb421216498cedf76aee7afd4ebb5a011f68662e0dd0ee9c3548db4000f737a8ecae6cb7472f7d969f541d66f64f75a4a743de660851863618a6fc05c2b"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x8, 0xb, 0x81, [@generic={0x7d, 0x23, "9efe75eade35f3b8b3b49bd3b61976bbf985e590300757135592dfc34991b2aa6c739e794d414dfe832ec0fbdf35d3a3ac7e53be920025bd9e1ec2a7c1aaa8d8f1b80e9230a2ce317f141750e35575a328b2711fe9c80d9061188287abb7c1ad40602f97b97fc820d2fe1e3c1cbf1f61e9fbda22545897369a4f2c"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x3, 0xc0, 0x3}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x9, 0xf, 0x5}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x2, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x37, 0x5}]}}, {{0x9, 0x5, 0x0, 0x2, 0x0, 0x7, 0xd, 0x8, [@generic={0x4f, 0x7, "73421cfa73e27920105016d72b319f7b63f6bcb5e8d4689be64dbb6d195ee58461486a6bc14f857b7d780faac4415723bd322e1d990149e5f80c7fee553f3104e90a91434e0f8a13c0c6c9f310"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x5, 0x4, 0x40, [@generic={0x3d, 0x23, "39f0dd72889f68517c52cd3bfa5eca33c0915f8092479b255ae045ac50cd88457cd8b8d113b7f4c2107e996dfad42b856b7734736b5887d8bc2360"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x6}]}}]}}, {{0x9, 0x4, 0x47, 0x4, 0x3, 0x9e, 0xaf, 0x3f, 0x5, [@uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x2, 0xd, "f0"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x200, 0xf188, 0x2, "4a6680b41425c7b812"}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "b6fe9ed06d77"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x7fff, 0xf9}, {0x6, 0x24, 0x1a, 0x9, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0xf0, 0x9, 0x1}, @dmm={0x7, 0x24, 0x14, 0xd339, 0x3ff}]}], [{{0x9, 0x5, 0xb, 0x2, 0x10, 0x3, 0xf8, 0x2, [@generic={0x76, 0xa, "9d86ee61a1499b488650f679ba4d1d5d34e64ffe9f54ef5dd002b836645e5fb9e74b0a37e52b07d7188621c21f6cf4144e7907968ceee0328f7ed1a1e995a5db16d276d5dbfd62dcadbd5cf3fa9bde1ddfc67e275ec92de7a304827efad4a9aba98e25eccb89e159c85d613ef67fcc5e76af4352"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xfb, 0x6}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x5, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x400}]}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x4, 0x7, 0x16, [@generic={0x5d, 0x23, "fa61fbda17655d2abf60c4bf781657260c3111ba072be9edf9873b620357d3d90dc19a4fcdce8e776f4079803787374699551a37db8f277da458aea083f5d9125f1ab950e05fac538fb9aeefbfbc53ba7d005e2087987c02e6a7a5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x3f}]}}]}}]}}]}}, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000080)='user\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000000000)='R\x10rD\x90\x05\x10\xce\x8b\xe6\x16\t\x00\x15\xb7\xb5Vd\xcd\xfbD\xccl\x1e\x94\x00#\xdd\xe7p\x9c\xcf`\x1f<\x03\x87\x97\xbb\a?\xa4\xfc\xd9v\x8b_(\xe3\x14\xcf\x15\xfc\x89\x7f', 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect(0x4, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="40a51504000000bb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r2) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1b1c, 0x1c1f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x4000, 0xb, 0x1, {0x22, 0x1dd}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x94, 0xf8}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0x2, 0xe}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x84, 0x9, 0xfc, 0x10, 0xb}, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="050f3f00050b100104630002020900840a10030209000201ff070a10100a0362000100000f0000003f00100000000007100200a07200"], 0x6, [{0x63, &(0x7f00000001c0)=@string={0x63, 0x3, "5b3009d32e72ef524c7852e99a99a42ff897db143c1139df1d9193319390d9d04617347e7942344d2de72ce5f78cbf833ebdf177b11c9fc84168a68f4d0ccff697faa519f509386981fa093b2606ab964f04b6c4bbe79b0ca7d6a2bfa03bf3f7f1"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2809}}, {0x9f, &(0x7f0000000280)=@string={0x9f, 0x3, "9c216953053cca2ceb57c3e88e3d762d444f2de8e8467f1436821cf3d597d12a620a9c8567e1c137f057f95beaabd2c3ace675ab0fff35df1101b46c5b1a35709bdd1fc429bf55fed0f28db465cd3d2985f83998b42d19588475b78915e0fa4be2cf22f2adc73be9da6fcbd421b4da3e6f08c8c793c25bc346a98606b72fa543d03e354b070c111a648d5235dedd4132faad5959235c31098922728e27"}}, {0xe1, &(0x7f0000000340)=@string={0xe1, 0x3, "3b1a4c9bd928a34097a95e98e306f1e874ee1f98e1175df732d3c69159f34e3dcf33051f7216a9c2cce2f13c5937f6ef6237a9690232db4862755e97cba0d972bb1f4b698abc1b49e98e4efd5df69cf5f3a00eedd47875b80014ea31e11ebd43ae371148676c22eff34aaba58157d5f75335cae217efd5ae5d6b9d2792aa8d4f6a393af8f783d06da788f3f6b2d4872f00b6b078e534dac70f2ceec0fdedc4810052c3f4d07aa3e37518eeffa15eba29a321611947c1c34c16d374f6917c83550498eaa06e90be3332ce17a42cc3cb4935a3d39d4a6405f517ae9f3632bdf2"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40a}}]}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x89) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@remote, 0x4e22, 0x0, 0x4e24, 0x7, 0xa}, {0x5412cd27, 0x7f, 0x0, 0x4, 0x5, 0x5, 0x0, 0x40000000000000}, {0x9, 0x100009, 0x53e5, 0xb}, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0xffffeffd, 0x32}, 0x0, @in=@multicast1, 0x1502, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0xf55}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe8f}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000001480)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000014c0)=0x28) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4014) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0x40003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff16, 0x3, 0x10, 0x4, 0x4]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.211598805s ago: executing program 3 (id=2522): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x10002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2, 0x3, 0xf8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8000, 0x0, 0x2, 0x0, 0xfffffe0000000000, 0xfa11, 0xfffffffd}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x504}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000200)={0x100, r3}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x140) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x100, r4}, 0x0) landlock_restrict_self(r2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x1d}, 0x47, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000000c0)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000000)={0x2108, r5}, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r2, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) 2.162370057s ago: executing program 4 (id=2523): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000180)={0x60, 0x2, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xa, &(0x7f0000000080)=[{0x0, 0x8, 0x9}, {0x4, 0xa028, 0x101}, {0x5, 0x8000000000000001, 0x1e}, {0x35dc4973, 0x1, 0x1}, {0x4, 0x6, 0x7}, {0x3, 0xf, 0x43f6}, {0xfffffffffffffeff, 0x8, 0xffffffffffffff81}, {0x7, 0x5}, {0x800, 0x3, 0xce7}, {0x6, 0x984e, 0x9}], 0xa, 0x1288, 0x62, 0x72, 0x0, 0x8}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) 1.806659283s ago: executing program 3 (id=2524): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0xfffffff, 0x1, 0x2, r2, 0x0, &(0x7f0000000100)={0x99091b, 0x80000000, '\x00', @p_u16=&(0x7f0000000040)=0x800}}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) 1.145902287s ago: executing program 4 (id=2525): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_setup(0x2de5, &(0x7f0000000140)={0x0, 0x980a, 0x2, 0x400002, 0xc5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) (fail_nth: 3) 449.102275ms ago: executing program 5 (id=2526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x40}}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2, 0x0, 0x0, 0x30000}, 0x5) 163.055744ms ago: executing program 4 (id=2527): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2000) ioctl$EVIOCGMASK(r0, 0x541b, 0x0) 121.940689ms ago: executing program 1 (id=2528): syz_emit_ethernet(0x5a, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@timestamp_prespec={0x7, 0x1c, 0xf, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@empty}, {@multicast1, 0x8}]}]}}, @redirect={0x8, 0x0, 0x0, @dev, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}}, 0x0) 106.9713ms ago: executing program 5 (id=2529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x1}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000000700)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xb7fc, 0x400, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r8, 0x80089419, &(0x7f0000000240)) r10 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) pread64(r10, &(0x7f0000000080)=""/49, 0x31, 0x8) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r7, 0x0, &(0x7f0000000200)) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8800) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r12) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c38303231"], 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) recvmmsg(r12, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r11, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0x4, 'id0\x00', 'timer0\x00', 0x0, 0x7, 0x9, 0x6, 0x4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000208060001080006040001aaaaaaaafb91ac1414bbaaaaaaaaaaaae0000002"], 0x0) syz_open_dev$hiddev(&(0x7f0000000280), 0x7f3, 0x131002) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r4, 0x0, 0x0, 0x1, 0x1}) 0s ago: executing program 1 (id=2530): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) r0 = memfd_secret(0x80000) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0xa, 0x11, r0, 0xb8b7c000) mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="040100001800010029bd7000fedbdf25000000800000000001e000000200000000004e2100004e2400ff0a00a08000000000fe0a2c9c9fcf7cdce157eed9623b67b40dcea1cc7bc6493913c4cca25da5ea3d15360c431418b7c0208835fddeecd0d9fe6c5d980f1d2e3f3af39e40210135bed9a8a392ce7110d7ced8e0376c65f2d43ca1dbb406779f5bb7fc2ef0b532fb04e52bb06ea0bfbd0f7a4fba831168db558031aa0ef6ff4f76dda230230fa70c1a7a7043ff593a4cc781f712c5edb65e50bc75b7bd102ca5dd", @ANYRES32=0x0, @ANYRES8, @ANYBLOB="7f000001000000000000000000000000000004d23c000000fe8000000000000000000000000000bbf1e4ef6500000000fb00000000000000e8560000000000000000000000d501000000000000000000ffffff7f000000005e130000000000007f000000000000000008000000000000040000000000000062b5000000000000010009000000000000000000feffffffffffffff2bbd7000023500000a000307090000000000000079000000000000000c0015005d073500e20e0000"], 0x104}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4b3c, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) r5 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) io_uring_enter(r5, 0x4d10, 0x2, 0x2, 0x0, 0x0) lseek(r4, 0x3, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xebc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x2023002, &(0x7f0000002140)=ANY=[]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) kernel console output (not intermixed with test programs): Disconnecting em28xx [ 393.356711][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.381144][ T5885] em28xx 5-1:0.0: Freeing device [ 393.424274][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.479793][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.766850][T11787] qmi_wwan 6-1:0.40: More than one union descriptor, skipping ... [ 393.826765][T11787] qmi_wwan 6-1:0.40: probe with driver qmi_wwan failed with error -22 [ 393.946415][T11787] usb 6-1: USB disconnect, device number 27 [ 394.968169][T11834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1850'. [ 395.475801][T11790] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 395.746569][T11790] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 395.855769][T11790] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 395.910430][T11790] usb 6-1: config 8 has no interface number 0 [ 395.954431][T11790] usb 6-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.055942][T11790] usb 6-1: config 8 interface 177 has no altsetting 0 [ 396.110789][T11790] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 396.131834][T11790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.188894][T11790] ir_toy 6-1:8.177: required endpoints not found [ 397.485429][T11866] fuse: Bad value for 'user_id' [ 397.515396][T11866] fuse: Bad value for 'user_id' [ 397.589440][T11866] warning: `syz.1.1858' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 398.111726][T11876] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1860'. [ 398.314760][T11790] usb 6-1: USB disconnect, device number 28 [ 398.525919][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 398.535109][ T5885] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 398.788097][ T5885] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.798840][ T5885] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.824045][ T5885] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 398.838796][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 398.866826][ T5885] usb 5-1: SerialNumber: syz [ 399.148520][ T5885] usb 5-1: 0:2 : does not exist [ 399.171417][ T5885] usb 5-1: unit 23 not found! [ 399.224701][T11891] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1866'. [ 399.235542][ T5885] usb 5-1: USB disconnect, device number 70 [ 399.274781][ T6493] udevd[6493]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.329382][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1867'. [ 399.856066][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 399.975942][T11790] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 400.017428][ T9] usb 2-1: too many configurations: 226, using maximum allowed: 8 [ 400.029166][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 400.046033][ T9] usb 2-1: can't read configurations, error -61 [ 400.135861][T11790] usb 5-1: Using ep0 maxpacket: 16 [ 400.145297][T11790] usb 5-1: config 0 interface 0 has no altsetting 0 [ 400.156263][T11790] usb 5-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.9c [ 400.165747][T11790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.174937][T11790] usb 5-1: Product: syz [ 400.183112][T11790] usb 5-1: Manufacturer: syz [ 400.190856][T11790] usb 5-1: SerialNumber: syz [ 400.195903][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 400.243083][T11790] usb 5-1: config 0 descriptor?? [ 400.379200][T11790] usb 5-1: selecting invalid altsetting 1 [ 400.488629][ T9] usb 2-1: too many configurations: 226, using maximum allowed: 8 [ 400.498344][T11790] snd-usb-caiaq 5-1:0.0: can't set alt interface. [ 400.514880][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 400.525350][T11790] usb 5-1: unable to init card! (ret=-5) [ 400.548223][T11790] snd-usb-caiaq 5-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 400.558279][ T9] usb 2-1: can't read configurations, error -61 [ 400.577937][ T9] usb usb2-port1: attempt power cycle [ 400.935771][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 400.944833][T11927] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1878'. [ 400.986215][T11927] xt_CT: No such helper "pptp" [ 401.039811][ T9] usb 2-1: too many configurations: 226, using maximum allowed: 8 [ 401.075383][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 401.102700][ T9] usb 2-1: can't read configurations, error -61 [ 401.235752][T11790] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 401.246210][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 401.266882][ T9] usb 2-1: too many configurations: 226, using maximum allowed: 8 [ 401.277338][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 401.285312][ T9] usb 2-1: can't read configurations, error -61 [ 401.292539][ T9] usb usb2-port1: unable to enumerate USB device [ 401.386805][T11790] usb 6-1: Using ep0 maxpacket: 32 [ 401.400045][T11790] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 401.408865][T11790] usb 6-1: config 0 has no interface number 0 [ 401.425185][T11790] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 401.434500][T11790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.443636][T11790] usb 6-1: Product: syz [ 401.452814][T11790] usb 6-1: Manufacturer: syz [ 401.461716][T11790] usb 6-1: SerialNumber: syz [ 401.504490][T11790] usb 6-1: config 0 descriptor?? [ 401.525259][T11790] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 401.552367][T11790] usb 6-1: selecting invalid altsetting 1 [ 401.571138][T11790] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 401.630307][T11790] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 401.691272][T11790] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 401.709988][T11790] usb 6-1: media controller created [ 401.815277][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 401.848765][T11790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.742137][T11782] usb 5-1: USB disconnect, device number 71 [ 402.788914][T11942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1884'. [ 403.008232][T11790] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 403.022294][T11790] zl10353_read_register: readreg error (reg=127, ret==-110) [ 403.335832][ T9] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 403.575948][ T9] usb 2-1: device descriptor read/64, error -71 [ 403.845801][ T9] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 403.898237][T11952] fuse: Unknown parameter 'LЄgroup_id' [ 403.986231][ T9] usb 2-1: device descriptor read/64, error -71 [ 404.223570][ T9] usb usb2-port1: attempt power cycle [ 404.233313][T11790] usb 6-1: USB disconnect, device number 29 [ 404.575815][ T9] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 404.596310][ T9] usb 2-1: device descriptor read/8, error -71 [ 404.795819][ T5885] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 404.835842][ T9] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 404.856441][ T9] usb 2-1: device descriptor read/8, error -71 [ 404.947668][ T5885] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 404.955627][ T5885] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 404.966174][ T9] usb usb2-port1: unable to enumerate USB device [ 404.966729][ T5885] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 404.984739][ T5885] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 404.996538][ T5885] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 405.009906][ T5885] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 405.017658][ T5885] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 405.028656][ T5885] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 405.040517][ T5885] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 405.051806][ T5885] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 405.064273][ T5885] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 405.071765][ T5885] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 405.082613][ T5885] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 405.094595][ T5885] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 405.105893][ T5885] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 405.121886][ T5885] usb 5-1: string descriptor 0 read error: -22 [ 405.128263][ T5885] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 405.137598][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.154989][ T5885] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 405.587821][T11977] netlink: 'syz.5.1895': attribute type 8 has an invalid length. [ 405.947769][ T9] usb 5-1: USB disconnect, device number 72 [ 406.341304][T11986] netlink: 'syz.4.1898': attribute type 2 has an invalid length. [ 406.499839][T11993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1901'. [ 406.512614][T11994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1899'. [ 406.608490][T11994] xt_CT: No such helper "pptp" [ 406.995809][T11790] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 407.019225][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 407.246027][T11790] usb 2-1: Using ep0 maxpacket: 32 [ 407.251338][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 407.270488][ T9] usb 4-1: config 128 has an invalid interface number: 10 but max is 0 [ 407.283711][T11790] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.293447][ T9] usb 4-1: config 128 has an invalid interface number: 5 but max is 0 [ 407.303820][T11790] usb 2-1: config 0 has no interface number 0 [ 407.312591][ T9] usb 4-1: config 128 has an invalid descriptor of length 64, skipping remainder of the config [ 407.332291][T11790] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 407.348363][T11790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.358431][ T9] usb 4-1: config 128 has 2 interfaces, different from the descriptor's value: 1 [ 407.372530][T11790] usb 2-1: Product: syz [ 407.459930][ T9] usb 4-1: config 128 has no interface number 0 [ 407.471008][T11790] usb 2-1: Manufacturer: syz [ 407.480612][T12012] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1906'. [ 407.506790][ T9] usb 4-1: config 128 has no interface number 1 [ 407.519056][T11790] usb 2-1: SerialNumber: syz [ 407.533189][ T9] usb 4-1: config 128 interface 10 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 407.559944][T11790] usb 2-1: config 0 descriptor?? [ 407.572942][T11790] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 407.587193][ T9] usb 4-1: too many endpoints for config 128 interface 5 altsetting 9: 125, using maximum allowed: 30 [ 407.633601][T11790] usb 2-1: selecting invalid altsetting 1 [ 407.652514][ T9] usb 4-1: config 128 interface 5 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 125 [ 407.666383][T11790] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 407.687327][T11790] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 407.698731][ T9] usb 4-1: config 128 interface 10 has no altsetting 0 [ 407.724298][ T9] usb 4-1: config 128 interface 5 has no altsetting 0 [ 407.732366][T11790] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 407.762687][ T9] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db54, bcdDevice=83.ea [ 407.786353][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.801915][T11790] usb 2-1: media controller created [ 407.821829][ T9] usb 4-1: Product: 夸㜱ꓪᾞ誈쫨穤싇蟀๲僔厄씐砰留풓煔輧㱧睃娑엻獓ꅡ꡶䁓ꥁꙞힴǎﰲﾡ䋚긦馯䶫ꦡ눷⫇藩㎦祁峹寎ꏂ禑ށƔ뫋냲಑좱ঙ禨鯃돐浉퀔 [ 407.853371][T11790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.871101][ T9] usb 4-1: Manufacturer: 菔㥈噁黇ꬾ礂䕪ʒ쿿┧웾􌋹쾒Ḓ㴧瀒뻯镣꾯ᷞ쉟灰귉要ﵵ唱ꚴ斠㟭匚찠夐뚍谁駼湦㯢梚튓뙚ፂܚ଱膕ᰂ靨哫ྙ剗ᱛܫ専쀠䅲﹅ꀥ뀂ᮕ擋᳈싽方쑧є㋗⛟ꡂﯤ넯䄤놇裒書쌗蔋쁓徑诈인騴፻ㅱẴꉦ걑誴 [ 407.968255][ T9] usb 4-1: SerialNumber: Ѝ [ 408.044806][T12022] fuse: Unknown parameter '0x00000000000000030x00000000000000041844674407370955161500000000000000000003' [ 408.129988][T11803] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 408.298943][T11803] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 408.327908][T11803] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.355905][T11803] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 408.375555][T11803] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.402685][T11803] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25708, setting to 1024 [ 408.448127][T11803] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 408.462104][T11803] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 408.482131][T11803] usb 5-1: Product: syz [ 408.492618][T11803] usb 5-1: Manufacturer: syz [ 408.520276][T12019] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 408.539090][T11803] cdc_wdm 5-1:1.0: skipping garbage [ 408.554612][T11803] cdc_wdm 5-1:1.0: skipping garbage [ 408.577208][T11803] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 408.593807][T11803] cdc_wdm 5-1:1.0: Unknown control protocol [ 408.723075][ T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in cold state, will try to load a firmware [ 408.740097][ C0] wdm_int_callback: 2828 callbacks suppressed [ 408.740119][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 408.752826][ C0] wdm_int_callback: 2828 callbacks suppressed [ 408.752844][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 408.765428][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 408.772038][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 408.778471][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 408.785088][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 408.791657][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 408.798407][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 408.805781][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 408.812427][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 408.819883][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 408.826518][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 408.833986][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 408.840652][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 408.848292][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 408.855081][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 408.862570][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 408.869230][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 408.875759][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 408.882382][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 408.912560][ T9] usb 4-1: Direct firmware load for dvb-usb-bluebird-01.fw failed with error -2 [ 408.921846][ T9] usb 4-1: Falling back to sysfs fallback for: dvb-usb-bluebird-01.fw [ 408.943917][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'. [ 408.980174][ T982] usb 5-1: USB disconnect, device number 73 [ 409.006031][T11790] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 409.013318][T11790] zl10353_read_register: readreg error (reg=127, ret==-110) [ 409.161770][T12036] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 409.567730][T12050] xt_hashlimit: size too large, truncated to 1048576 [ 410.007675][T11790] usb 2-1: USB disconnect, device number 61 [ 410.240203][T11803] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 410.525466][T11803] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 410.547407][T12070] tipc: Started in network mode [ 410.562015][T12070] tipc: Node identity ac1414aa, cluster identity 4711 [ 410.584843][T12070] tipc: New replicast peer: 100.1.1.1 [ 410.601700][T12070] tipc: Enabled bearer , priority 10 [ 411.595947][ T982] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 411.725802][ T5885] tipc: Node number set to 2886997162 [ 411.730260][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1938'. [ 411.776038][ T982] usb 5-1: Using ep0 maxpacket: 16 [ 411.804087][ T982] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 411.853720][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 411.909671][ T982] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 411.926710][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.935539][ T982] usb 5-1: Product: syz [ 411.940503][T12101] mac80211_hwsim hwsim16 : renamed from wlan1 (while UP) [ 411.950927][ T982] usb 5-1: Manufacturer: syz [ 411.955585][ T982] usb 5-1: SerialNumber: syz [ 411.981738][ T982] usb 5-1: config 0 descriptor?? [ 412.020044][ T982] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 412.066107][ T982] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 412.335071][T12121] fuse: Bad value for 'fd' [ 412.367783][T12126] netlink: 'syz.0.1944': attribute type 4 has an invalid length. [ 412.506876][ T982] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 412.734167][ T982] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 412.775767][ T982] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 412.782801][ T982] em28xx 5-1:0.0: No AC97 audio processor [ 413.137354][T12140] gtp0: entered promiscuous mode [ 413.156198][T12140] team0: Device gtp0 is of different type [ 413.248232][T11803] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 413.555820][T11803] usb 6-1: Using ep0 maxpacket: 32 [ 413.626145][T11803] usb 6-1: no configurations [ 413.632992][T11803] usb 6-1: can't read configurations, error -22 [ 413.652137][ T982] usb 5-1: USB disconnect, device number 74 [ 413.662004][ T982] em28xx 5-1:0.0: Disconnecting em28xx [ 413.737257][ T982] em28xx 5-1:0.0: Freeing device [ 413.806161][T11803] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 413.945805][T11786] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 413.995740][T11803] usb 6-1: Using ep0 maxpacket: 32 [ 414.001653][T11803] usb 6-1: no configurations [ 414.006703][T11803] usb 6-1: can't read configurations, error -22 [ 414.020059][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1952'. [ 414.030267][T11803] usb usb6-port1: attempt power cycle [ 414.041814][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1952'. [ 414.099520][T11786] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 414.109194][T11786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.163776][T11786] usb 2-1: Product: syz [ 414.178126][T11786] usb 2-1: Manufacturer: syz [ 414.191308][T11786] usb 2-1: SerialNumber: syz [ 414.209165][T11786] usb 2-1: config 0 descriptor?? [ 414.232314][T11786] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 414.437976][T11803] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 414.503384][T11803] usb 6-1: Using ep0 maxpacket: 32 [ 414.533499][T11803] usb 6-1: no configurations [ 414.545429][T11803] usb 6-1: can't read configurations, error -22 [ 414.638229][ T982] usb 2-1: USB disconnect, device number 62 [ 414.730230][T11803] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 414.776836][T11803] usb 6-1: Using ep0 maxpacket: 32 [ 414.782807][T11803] usb 6-1: no configurations [ 414.796851][T11803] usb 6-1: can't read configurations, error -22 [ 414.815146][T11803] usb usb6-port1: unable to enumerate USB device [ 415.011234][T12158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1954'. [ 415.026954][T12158] vlan2: entered promiscuous mode [ 415.387617][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1959'. [ 416.529158][T12199] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 416.689035][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 416.966760][T12222] ip6gre3: entered promiscuous mode [ 417.435811][T11803] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 417.750016][T12237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.799084][T11803] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 417.799115][T11803] usb 6-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 417.799175][T11803] usb 6-1: config 220 interface 1 altsetting 5 bulk endpoint 0x89 has invalid maxpacket 211 [ 417.799200][T11803] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 417.799227][T11803] usb 6-1: config 220 interface 0 has no altsetting 0 [ 417.799245][T11803] usb 6-1: config 220 interface 1 has no altsetting 0 [ 417.803291][T11803] usb 6-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 417.803314][T11803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.803325][T11803] usb 6-1: Product: syz [ 417.803334][T11803] usb 6-1: Manufacturer: syz [ 417.803341][T11803] usb 6-1: SerialNumber: syz [ 418.090803][T11803] usb 6-1: selecting invalid altsetting 0 [ 418.091468][T11803] uvcvideo 6-1:220.0: probe with driver uvcvideo failed with error -22 [ 418.093489][T11803] usb 6-1: selecting invalid altsetting 0 [ 418.093520][T11803] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 418.114296][T11803] usb 6-1: USB disconnect, device number 34 [ 418.839305][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 418.870800][T12259] ip6gre3: entered promiscuous mode [ 418.883382][T12259] ip6gre3: entered allmulticast mode [ 418.977659][ T982] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 419.156551][ T982] usb 6-1: Using ep0 maxpacket: 32 [ 419.171152][ T982] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 419.193644][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.212248][ T982] usb 6-1: config 0 descriptor?? [ 419.262170][T12274] FAULT_INJECTION: forcing a failure. [ 419.262170][T12274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.283158][T12274] CPU: 1 UID: 0 PID: 12274 Comm: syz.1.1996 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.283206][T12274] Tainted: [L]=SOFTLOCKUP [ 419.283213][T12274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 419.283223][T12274] Call Trace: [ 419.283231][T12274] [ 419.283239][T12274] dump_stack_lvl+0xe8/0x150 [ 419.283266][T12274] should_fail_ex+0x412/0x560 [ 419.283292][T12274] _copy_from_user+0x2d/0xb0 [ 419.283317][T12274] dev_ethtool+0xcf/0x1ae0 [ 419.283347][T12274] ? kasan_quarantine_put+0xbb/0x1f0 [ 419.283376][T12274] ? __pfx_dev_ethtool+0x10/0x10 [ 419.283394][T12274] ? dev_load+0x21/0x1f0 [ 419.283422][T12274] ? dev_load+0x21/0x1f0 [ 419.283440][T12274] ? dev_load+0x21/0x1f0 [ 419.283459][T12274] dev_ioctl+0x392/0x1150 [ 419.283481][T12274] sock_do_ioctl+0x23e/0x320 [ 419.283500][T12274] ? __pfx_sock_do_ioctl+0x10/0x10 [ 419.283514][T12274] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 419.283542][T12274] sock_ioctl+0x5c6/0x7f0 [ 419.283566][T12274] ? __pfx_sock_ioctl+0x10/0x10 [ 419.283585][T12274] ? __fget_files+0x2a/0x420 [ 419.283600][T12274] ? __fget_files+0x3a0/0x420 [ 419.283614][T12274] ? __fget_files+0x2a/0x420 [ 419.283633][T12274] ? bpf_lsm_file_ioctl+0x9/0x20 [ 419.283652][T12274] ? __pfx_sock_ioctl+0x10/0x10 [ 419.283674][T12274] __se_sys_ioctl+0xfc/0x170 [ 419.283699][T12274] do_syscall_64+0xe2/0xf80 [ 419.283714][T12274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.283727][T12274] ? trace_irq_disable+0x37/0x100 [ 419.283736][T12274] ? clear_bhb_loop+0x60/0xb0 [ 419.283748][T12274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.283758][T12274] RIP: 0033:0x7fcadc39aeb9 [ 419.283770][T12274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.283782][T12274] RSP: 002b:00007fcadd2e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.283801][T12274] RAX: ffffffffffffffda RBX: 00007fcadc615fa0 RCX: 00007fcadc39aeb9 [ 419.283814][T12274] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 419.283825][T12274] RBP: 00007fcadd2e5090 R08: 0000000000000000 R09: 0000000000000000 [ 419.283836][T12274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.283846][T12274] R13: 00007fcadc616038 R14: 00007fcadc615fa0 R15: 00007fcadc73fa48 [ 419.283872][T12274] [ 419.498889][ T982] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 419.531300][T12277] netlink: 'syz.5.1987': attribute type 1 has an invalid length. [ 419.608747][ T982] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 419.677314][ T982] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 419.685246][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'. [ 419.695034][ T982] usb 6-1: media controller created [ 419.724668][ T982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 419.737902][T12283] ip6gre2: entered promiscuous mode [ 419.791102][ T982] az6027: usb out operation failed. (-71) [ 419.799189][ T982] az6027: usb out operation failed. (-71) [ 419.813524][ T982] stb0899_attach: Driver disabled by Kconfig [ 419.825483][ T982] az6027: no front-end attached [ 419.825483][ T982] [ 419.835198][ T982] az6027: usb out operation failed. (-71) [ 419.841320][ T982] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 419.852303][ T982] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input36 [ 419.883703][ T982] dvb-usb: schedule remote query interval to 400 msecs. [ 419.900362][ T982] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 419.927387][T12289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2002'. [ 419.939911][ T982] usb 6-1: USB disconnect, device number 35 [ 420.008387][ T982] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 420.346043][ T982] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 420.567106][ T982] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 420.576004][ T982] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.586950][ T982] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 420.596494][ T982] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.607952][ T982] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25708, setting to 1024 [ 420.621513][ T982] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 420.631240][ T982] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 420.639662][ T982] usb 6-1: Product: syz [ 420.645932][ T982] usb 6-1: Manufacturer: syz [ 420.657160][T12285] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 420.669358][ T982] cdc_wdm 6-1:1.0: skipping garbage [ 420.678611][ T982] cdc_wdm 6-1:1.0: skipping garbage [ 420.690861][ T982] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 420.699576][ T982] cdc_wdm 6-1:1.0: Unknown control protocol [ 420.910930][ C1] wdm_int_callback: 290 callbacks suppressed [ 420.910954][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 420.923590][ C1] wdm_int_callback: 290 callbacks suppressed [ 420.923620][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 420.936169][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 420.942798][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 420.949041][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 420.955625][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 420.961905][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 420.968504][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 420.974776][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 420.981368][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 420.987657][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 420.994251][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 421.000531][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 421.007123][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 421.013458][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 421.020142][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 421.026671][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 421.033303][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 421.039672][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 421.046290][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 421.068326][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1999'. [ 421.093026][ T982] usb 6-1: USB disconnect, device number 36 [ 421.458307][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2014'. [ 421.474759][T12320] vlan0: entered promiscuous mode [ 421.657713][T11803] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 421.827421][T11803] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 421.843713][T11803] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 421.879943][T12335] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2019'. [ 421.956128][T11803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 421.985778][T11803] usb 5-1: SerialNumber: syz [ 422.812443][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2026'. [ 422.843306][T11803] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 422.937611][T12352] vlan3: entered promiscuous mode [ 423.126377][T11803] usb 5-1: USB disconnect, device number 75 [ 423.133542][T11803] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 423.746833][T12374] syzkaller0: entered promiscuous mode [ 423.752901][T12374] syzkaller0: entered allmulticast mode [ 423.985798][T11786] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 424.286206][T11786] usb 6-1: Using ep0 maxpacket: 16 [ 424.321644][T11786] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 424.335728][T11786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.374531][T11786] usb 6-1: Product: syz [ 424.378940][T11786] usb 6-1: Manufacturer: syz [ 424.383524][T11786] usb 6-1: SerialNumber: syz [ 424.426515][T11786] usb 6-1: config 0 descriptor?? [ 424.507737][T11786] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 424.768420][T11786] usb 6-1: USB disconnect, device number 37 [ 424.775967][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 425.078944][T12403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.171174][T12436] Cannot find set identified by id 1 to match [ 427.591445][T12447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2044'. [ 427.905869][T11782] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 428.100845][T11782] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 428.141242][T11782] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 428.178812][T11782] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 428.246778][T11782] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 428.256210][T11782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.278355][T11782] usb 5-1: Product: syz [ 428.315985][T11782] usb 5-1: Manufacturer: syz [ 428.352734][T11782] usb 5-1: SerialNumber: syz [ 428.394698][T11782] usb 5-1: config 0 descriptor?? [ 428.416166][T12450] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 428.486842][T12450] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 428.537173][T11782] usb 5-1: ucan: probing device on interface #0 [ 428.795557][T11782] usb 5-1: ucan: device protocol version 84027139 is not supported [ 428.848323][T11782] usb 5-1: ucan: probe failed; try to update the device firmware [ 429.099633][T12465] tipc: New replicast peer: 255.255.255.255 [ 429.118224][T12465] tipc: Enabled bearer , priority 10 [ 430.077207][T11782] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 430.126004][T11803] tipc: Node number set to 630085625 [ 430.244834][T11782] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 430.268766][T11782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.293851][T11782] usb 2-1: config 0 descriptor?? [ 430.308790][T12496] bond0: entered promiscuous mode [ 430.317200][T11782] cp210x 2-1:0.0: cp210x converter detected [ 430.335920][T12496] bond_slave_0: entered promiscuous mode [ 430.351563][T12496] bond_slave_1: entered promiscuous mode [ 430.398763][T12496] batadv_slave_0: entered promiscuous mode [ 430.716321][T11782] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 430.884740][T11786] usb 5-1: USB disconnect, device number 76 [ 430.944543][T11782] usb 2-1: cp210x converter now attached to ttyUSB0 [ 431.132094][T12516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2065'. [ 431.198246][T12518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2065'. [ 431.535784][ T982] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 431.701307][ T982] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.713673][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.756014][ T982] usb 5-1: Product: syz [ 431.762526][ T982] usb 5-1: Manufacturer: syz [ 431.768754][ T982] usb 5-1: SerialNumber: syz [ 432.067756][ T982] cdc_ncm 5-1:1.0: bind() failure [ 432.093280][ T982] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 432.114477][ T982] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 432.124594][ T982] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 432.151242][ T982] usb 5-1: USB disconnect, device number 77 [ 432.532122][T12537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2068'. [ 432.658104][T12541] loop2: detected capacity change from 0 to 7 [ 432.668286][T12541] Dev loop2: unable to read RDB block 7 [ 432.674062][T12541] loop2: unable to read partition table [ 432.681512][T12541] loop2: partition table beyond EOD, truncated [ 432.699283][T11782] usb 2-1: USB disconnect, device number 63 [ 432.710839][T11782] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 432.720339][T12541] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 432.749884][T11782] cp210x 2-1:0.0: device disconnected [ 432.785395][T12544] fuse: Unknown parameter 'dj' [ 432.808725][T12540] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.816360][T12540] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.998257][ T60] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.024393][ T60] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.045126][ T60] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.076621][ T60] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.267059][T12558] binder: 12556:12558 unknown command 0 [ 433.272856][T12558] binder: 12556:12558 ioctl c0306201 200000000080 returned -22 [ 433.495836][T11803] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 433.551948][T12577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2084'. [ 433.655242][T11803] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 433.664712][T11803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.718384][T11803] usb 2-1: config 0 descriptor?? [ 433.725936][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 433.942058][T11803] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 434.240925][T11803] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 434.395404][T11803] [drm] Initialized udl on minor 2 [ 434.452058][T12600] binder: 12597:12600 ioctl c0306201 0 returned -14 [ 434.527798][T12600] tmpfs: Unknown parameter '18446744073709551615' [ 434.647423][T12559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2076'. [ 434.656612][T12559] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2076'. [ 435.186449][T12600] binder: 12597:12600 ioctl d000941e 0 returned -22 [ 435.207952][T12559] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2076'. [ 435.240688][T11803] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 435.255911][T11803] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 435.289044][T11782] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 435.299660][T11803] usb 2-1: USB disconnect, device number 64 [ 435.310330][T11782] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 435.804609][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 435.804623][ T30] audit: type=1800 audit(1769762144.697:284): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2095" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 436.585756][T11782] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 437.188682][T11782] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 437.196884][T11782] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 437.207341][T11782] usb 2-1: config 8 has no interface number 0 [ 437.213456][T11782] usb 2-1: config 8 interface 80 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 437.237781][T11782] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 437.279367][T11782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.350413][T11782] usb 2-1: NFC: intf ffff88807b237000 id ffffffff8efb3a00 [ 437.540762][T12637] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2104'. [ 437.562388][T12627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.592086][T12627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.617887][T11803] usb 2-1: USB disconnect, device number 65 [ 437.662195][T11787] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 437.681269][T11787] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 437.877910][T11787] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 438.042015][T11787] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.066252][T11787] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.093894][T11787] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 438.108118][T11787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 438.148907][T11787] usb 5-1: SerialNumber: syz [ 438.226313][T12660] program syz.5.2113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.372532][T11787] usb 5-1: 0:2 : does not exist [ 438.380493][T11787] usb 5-1: unit 23 not found! [ 438.408153][T11787] usb 5-1: USB disconnect, device number 78 [ 438.495531][ T6493] udevd[6493]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.306397][T11803] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 439.455815][T11803] usb 5-1: device descriptor read/64, error -71 [ 439.525865][T11802] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 439.678894][T11802] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 439.691350][T11802] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 439.700621][T11803] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 439.709784][T11802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.718081][T11802] usb 2-1: Product: syz [ 439.722779][T11802] usb 2-1: Manufacturer: syz [ 439.727593][T11802] usb 2-1: SerialNumber: syz [ 439.740516][T11802] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 439.855828][T11803] usb 5-1: device descriptor read/64, error -71 [ 439.946940][T11802] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 439.965222][T11802] usb 2-1: USB disconnect, device number 66 [ 439.977985][T11803] usb usb5-port1: attempt power cycle [ 440.128308][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.134682][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.326099][T11803] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 440.346256][T11803] usb 5-1: device descriptor read/8, error -71 [ 440.572611][ T30] audit: type=1804 audit(1769762149.467:285): pid=12687 uid=0 auid=0 ses=2 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2123" name="bus" dev="ramfs" ino=45105 res=1 errno=0 [ 440.606129][T11803] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 440.626286][T11803] usb 5-1: device descriptor read/8, error -71 [ 440.746461][T11803] usb usb5-port1: unable to enumerate USB device [ 441.291638][T12710] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 441.396244][T11803] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.516032][T11782] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.990447][T12722] vlan0: entered promiscuous mode [ 442.135408][T12722] vlan0: entered allmulticast mode [ 442.161236][T12722] hsr_slave_1: entered allmulticast mode [ 442.186776][T12719] netlink: 'syz.0.2134': attribute type 1 has an invalid length. [ 442.206316][T12719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2134'. [ 442.215446][T12719] netlink: 'syz.0.2134': attribute type 1 has an invalid length. [ 442.430005][T12731] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2137'. [ 442.675843][T11786] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 442.688210][T12736] ALSA: seq fatal error: cannot create timer (-16) [ 442.916741][T11786] usb 6-1: Using ep0 maxpacket: 32 [ 442.927489][T11786] usb 6-1: config 0 has an invalid interface number: 28 but max is 0 [ 442.937914][T11786] usb 6-1: config 0 has no interface number 0 [ 442.944208][T11786] usb 6-1: config 0 interface 28 has no altsetting 0 [ 442.951475][T11786] usb 6-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice= 0.47 [ 442.963562][T11786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.995579][T11786] usb 6-1: config 0 descriptor?? [ 443.175854][T11787] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 443.256372][T11786] usb 6-1: string descriptor 0 read error: -71 [ 443.263160][T11786] usb-storage 6-1:0.28: USB Mass Storage device detected [ 443.280928][T11786] usb-storage 6-1:0.28: Quirks match for vid 054c pid 0069: 1 [ 443.392604][T11786] usb 6-1: USB disconnect, device number 38 [ 443.468711][T11787] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 443.478781][T11787] usb 2-1: config 0 has no interface number 0 [ 443.490730][T11787] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 443.509544][T11787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.518389][T11787] usb 2-1: Product: syz [ 443.522691][T11787] usb 2-1: Manufacturer: syz [ 443.544508][T11787] usb 2-1: SerialNumber: syz [ 443.559316][T12756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2146'. [ 443.572603][T12756] vlan2: entered promiscuous mode [ 443.624498][T11787] usb 2-1: config 0 descriptor?? [ 443.883082][T12762] fuse: Bad value for 'fd' [ 443.976791][T12743] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 444.235842][T11786] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 444.439472][T11786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.449746][T11786] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 444.464090][T11786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.498779][T11786] usb 6-1: config 0 descriptor?? [ 444.909717][T11786] usbhid 6-1:0.0: can't add hid device: -71 [ 444.941508][T11786] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 445.033952][T11786] usb 6-1: USB disconnect, device number 39 [ 445.706055][T11782] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 445.842308][T11787] asix 2-1:0.251: probe with driver asix failed with error -71 [ 445.867428][T11782] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 445.883685][T11787] usb 2-1: USB disconnect, device number 67 [ 445.895296][T11782] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 445.930527][T11782] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.964289][T11782] usb 5-1: config 0 interface 0 has no altsetting 0 [ 445.991877][T11782] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 446.017965][T11782] usb 5-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 446.041883][T11782] usb 5-1: Manufacturer: syz [ 446.057728][T11782] usb 5-1: config 0 descriptor?? [ 446.073060][T12772] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 446.394500][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2155'. [ 446.523108][T12786] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 446.657173][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 446.692882][T11782] usbhid 5-1:0.0: can't add hid device: -71 [ 446.699469][T11782] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 446.733591][T11782] usb 5-1: USB disconnect, device number 83 [ 446.994859][T12814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.216129][T11782] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 447.261314][T11786] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 447.275910][T11786] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 447.318944][T11786] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 447.355199][T11786] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 447.379664][T11786] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 447.381325][T11782] usb 2-1: config 252 has an invalid interface number: 251 but max is 0 [ 447.398219][T11782] usb 2-1: config 252 has no interface number 0 [ 447.404908][T11786] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 447.408366][T11782] usb 2-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 447.424426][T11786] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 447.424501][T11786] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 447.424527][T11786] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 447.424553][T11786] hid-generic 0000:0000:0004.0012: unknown main item tag 0x0 [ 447.467552][T11786] hid-generic 0000:0000:0004.0012: hidraw0: HID v0.03 Device [syz1] on syz0 [ 447.671433][T11782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.780820][T11782] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 448.023929][T12825] fido_id[12825]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 448.466320][T11782] gspca_sn9c20x: Write register 1001 failed -110 [ 448.473260][T11782] gspca_sn9c20x: Device initialization failed [ 448.497200][T11782] gspca_sn9c20x 2-1:252.251: probe with driver gspca_sn9c20x failed with error -110 [ 448.515791][T11786] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 448.548494][T12845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.550887][T11787] usb 2-1: USB disconnect, device number 68 [ 448.698751][ T30] audit: type=1326 audit(1769762157.597:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.4.2173" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd97259aeb9 code=0x0 [ 448.726031][T11786] usb 6-1: Using ep0 maxpacket: 16 [ 448.746688][T11786] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 448.755169][T12854] netlink: 39 bytes leftover after parsing attributes in process `syz.4.2173'. [ 448.764293][T12854] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2173'. [ 448.783316][T11786] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 448.799466][T11786] usb 6-1: can't read configurations, error -61 [ 448.936814][T11786] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 448.973499][T12856] syzkaller0: entered promiscuous mode [ 448.979245][T12856] syzkaller0: entered allmulticast mode [ 449.077218][T12858] fuse: Unknown parameter 'group_id00000000000000000000' [ 449.106791][T11786] usb 6-1: Using ep0 maxpacket: 16 [ 449.113167][T11786] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 449.123118][T11786] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 449.131041][T11786] usb 6-1: can't read configurations, error -61 [ 449.137788][T11786] usb usb6-port1: attempt power cycle [ 449.486859][T11786] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 449.552724][T11786] usb 6-1: Using ep0 maxpacket: 16 [ 449.676833][T11786] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 449.696882][T11786] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 449.712205][T11786] usb 6-1: can't read configurations, error -61 [ 449.845888][T11786] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 449.866774][T11786] usb 6-1: Using ep0 maxpacket: 16 [ 449.872786][T11786] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 449.888468][T11786] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 449.902323][T11786] usb 6-1: can't read configurations, error -61 [ 449.915771][T11786] usb usb6-port1: unable to enumerate USB device [ 450.550270][T12886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.655846][T11786] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 450.817715][T11786] usb 5-1: unable to get BOS descriptor or descriptor too short [ 450.826281][T11786] usb 5-1: not running at top speed; connect to a high speed hub [ 450.834833][T11786] usb 5-1: config 6 has an invalid interface number: 4 but max is 0 [ 450.843095][T11786] usb 5-1: config 6 has no interface number 0 [ 450.849282][T11786] usb 5-1: config 6 interface 4 altsetting 4 endpoint 0x5 has invalid maxpacket 1032, setting to 64 [ 450.860167][T11786] usb 5-1: config 6 interface 4 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 450.871021][T11786] usb 5-1: config 6 interface 4 has no altsetting 0 [ 450.875895][T11803] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 450.879771][T11786] usb 5-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 6.d0 [ 450.894422][T11786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.902668][T11786] usb 5-1: Product: syz [ 450.907125][T11786] usb 5-1: Manufacturer: syz [ 450.911776][T11786] usb 5-1: SerialNumber: syz [ 450.920396][T12882] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 450.927804][T12882] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 451.028716][T11803] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 451.037029][T11803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.047370][T11803] usb 2-1: config 0 has no interface number 0 [ 451.053669][T11803] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 451.065846][T11803] usb 2-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 451.079075][T11803] usb 2-1: config 0 interface 113 has no altsetting 0 [ 451.088256][T11803] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 451.097608][T11803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.105623][T11803] usb 2-1: Product: syz [ 451.109930][T11803] usb 2-1: Manufacturer: syz [ 451.114539][T11803] usb 2-1: SerialNumber: syz [ 451.122087][T11803] usb 2-1: config 0 descriptor?? [ 451.130881][T11803] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 451.152593][T11786] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 451.183364][T11786] usb 5-1: USB disconnect, device number 84 [ 451.328950][T12890] syzkaller0: entered promiscuous mode [ 451.334670][T12890] syzkaller0: entered allmulticast mode [ 451.390560][ T982] usb 2-1: USB disconnect, device number 69 [ 452.268148][T12907] kAFS: unable to lookup cell '(,cL' [ 452.664074][T12920] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 453.029249][T11803] hid_parser_main: 91 callbacks suppressed [ 453.029268][T11803] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 453.082648][T11803] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 453.657296][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2201'. [ 453.670218][T12934] vlan0: entered promiscuous mode [ 454.808833][ T982] IPVS: starting estimator thread 0... [ 454.909802][T12968] IPVS: using max 53 ests per chain, 127200 per kthread [ 454.985837][T11786] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 455.188876][T11786] usb 5-1: config 0 has no interfaces? [ 455.194536][T11786] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 455.238790][T11786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.289474][T11786] usb 5-1: config 0 descriptor?? [ 455.481613][T12980] FAULT_INJECTION: forcing a failure. [ 455.481613][T12980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.513634][T12980] CPU: 0 UID: 0 PID: 12980 Comm: syz.1.2215 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.513665][T12980] Tainted: [L]=SOFTLOCKUP [ 455.513671][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 455.513682][T12980] Call Trace: [ 455.513690][T12980] [ 455.513699][T12980] dump_stack_lvl+0xe8/0x150 [ 455.513726][T12980] should_fail_ex+0x412/0x560 [ 455.513751][T12980] strncpy_from_user+0x36/0x2b0 [ 455.513775][T12980] getname_flags+0xf2/0x540 [ 455.513797][T12980] do_sys_openat2+0xca/0x220 [ 455.513820][T12980] ? __pfx_do_sys_openat2+0x10/0x10 [ 455.513840][T12980] ? ksys_write+0x242/0x270 [ 455.513864][T12980] ? __pfx_ksys_write+0x10/0x10 [ 455.513890][T12980] __x64_sys_open+0x11e/0x150 [ 455.513912][T12980] do_syscall_64+0xe2/0xf80 [ 455.513931][T12980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.513947][T12980] ? trace_irq_disable+0x37/0x100 [ 455.513963][T12980] ? clear_bhb_loop+0x60/0xb0 [ 455.513984][T12980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.513999][T12980] RIP: 0033:0x7fcadc39aeb9 [ 455.514013][T12980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.514024][T12980] RSP: 002b:00007fcadd2e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 455.514041][T12980] RAX: ffffffffffffffda RBX: 00007fcadc615fa0 RCX: 00007fcadc39aeb9 [ 455.514053][T12980] RDX: 0000000000000036 RSI: 00000000000080ff RDI: 0000200000000100 [ 455.514062][T12980] RBP: 00007fcadd2e5090 R08: 0000000000000000 R09: 0000000000000000 [ 455.514072][T12980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.514082][T12980] R13: 00007fcadc616038 R14: 00007fcadc615fa0 R15: 00007fcadc73fa48 [ 455.514109][T12980] [ 455.839838][T11782] usb 5-1: USB disconnect, device number 85 [ 456.075853][T11786] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 456.370912][T11786] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 456.396453][T11786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.423677][T11786] usb 6-1: Product: syz [ 456.438985][T11786] usb 6-1: Manufacturer: syz [ 456.463325][T11786] usb 6-1: SerialNumber: syz [ 456.490748][T11786] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 456.512461][T11787] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 456.719340][T12986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.746500][T12986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.021299][T11786] usb 6-1: USB disconnect, device number 44 [ 457.467505][T13025] FAULT_INJECTION: forcing a failure. [ 457.467505][T13025] name failslab, interval 1, probability 0, space 0, times 0 [ 457.525862][T13025] CPU: 0 UID: 0 PID: 13025 Comm: syz.3.2231 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.525894][T13025] Tainted: [L]=SOFTLOCKUP [ 457.525900][T13025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 457.525910][T13025] Call Trace: [ 457.525917][T13025] [ 457.525924][T13025] dump_stack_lvl+0xe8/0x150 [ 457.525952][T13025] should_fail_ex+0x412/0x560 [ 457.525978][T13025] should_failslab+0xa8/0x100 [ 457.525999][T13025] kmem_cache_alloc_noprof+0x87/0x6e0 [ 457.526025][T13025] ? alloc_empty_file+0x55/0x1d0 [ 457.526044][T13025] ? kernel_text_address+0xa5/0xe0 [ 457.526068][T13025] alloc_empty_file+0x55/0x1d0 [ 457.526089][T13025] path_openat+0x11e/0x3e20 [ 457.526120][T13025] ? stack_trace_save+0xa9/0x100 [ 457.526139][T13025] ? __pfx_stack_trace_save+0x10/0x10 [ 457.526166][T13025] ? kasan_save_track+0x4f/0x80 [ 457.526181][T13025] ? kasan_save_track+0x3e/0x80 [ 457.526194][T13025] ? __kasan_slab_alloc+0x6c/0x80 [ 457.526209][T13025] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 457.526229][T13025] ? getname_flags+0xb7/0x540 [ 457.526244][T13025] ? do_sys_openat2+0xca/0x220 [ 457.526264][T13025] ? __pfx_path_openat+0x10/0x10 [ 457.526286][T13025] ? __lock_acquire+0x6b5/0x2cf0 [ 457.526320][T13025] do_filp_open+0x22d/0x490 [ 457.526343][T13025] ? __pfx_do_filp_open+0x10/0x10 [ 457.526390][T13025] ? _raw_spin_unlock+0x28/0x50 [ 457.526410][T13025] ? alloc_fd+0x64b/0x6c0 [ 457.526432][T13025] do_sys_openat2+0x12f/0x220 [ 457.526449][T13025] ? __pfx_do_sys_openat2+0x10/0x10 [ 457.526465][T13025] ? ksys_write+0x242/0x270 [ 457.526484][T13025] ? __pfx_ksys_write+0x10/0x10 [ 457.526504][T13025] __x64_sys_open+0x11e/0x150 [ 457.526522][T13025] do_syscall_64+0xe2/0xf80 [ 457.526537][T13025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.526550][T13025] ? trace_irq_disable+0x37/0x100 [ 457.526563][T13025] ? clear_bhb_loop+0x60/0xb0 [ 457.526578][T13025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.526591][T13025] RIP: 0033:0x7f413079aeb9 [ 457.526605][T13025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.526617][T13025] RSP: 002b:00007f41315e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 457.526632][T13025] RAX: ffffffffffffffda RBX: 00007f4130a15fa0 RCX: 00007f413079aeb9 [ 457.526642][T13025] RDX: 0000000000000036 RSI: 00000000000080ff RDI: 0000200000000100 [ 457.526651][T13025] RBP: 00007f41315e9090 R08: 0000000000000000 R09: 0000000000000000 [ 457.526659][T13025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.526667][T13025] R13: 00007f4130a16038 R14: 00007f4130a15fa0 R15: 00007f4130b3fa48 [ 457.526688][T13025] [ 457.814027][T11787] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 457.821347][T11787] ath9k_htc: Failed to initialize the device [ 457.828329][T11786] usb 6-1: ath9k_htc: USB layer deinitialized [ 458.615931][T11803] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 458.755799][T11803] usb 5-1: device descriptor read/64, error -71 [ 458.887916][T11786] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 459.016611][T11803] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 459.055772][T11786] usb 6-1: Using ep0 maxpacket: 8 [ 459.067251][T11786] usb 6-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 459.092764][T11786] usb 6-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 459.119622][T11786] usb 6-1: config 0 interface 0 has no altsetting 0 [ 459.135799][T11786] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 459.146140][T11803] usb 5-1: device descriptor read/64, error -71 [ 459.162746][T11786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.205211][T11786] usb 6-1: config 0 descriptor?? [ 459.256341][T11803] usb usb5-port1: attempt power cycle [ 459.451668][T13054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2239'. [ 459.483359][T11786] usbhid 6-1:0.0: can't add hid device: -71 [ 459.483474][T11786] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 459.633017][T11786] usb 6-1: USB disconnect, device number 45 [ 459.645869][T11803] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 459.684887][T11803] usb 5-1: device descriptor read/8, error -71 [ 459.927004][T11803] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 459.956044][T11803] usb 5-1: device descriptor read/8, error -71 [ 460.081597][T11803] usb usb5-port1: unable to enumerate USB device [ 461.094401][T13077] loop5: detected capacity change from 0 to 5375 [ 461.117878][T13077] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 461.136181][ T6493] buffer_io_error: 3 callbacks suppressed [ 461.136197][ T6493] Buffer I/O error on dev loop5, logical block 671, async page read [ 461.896696][T13095] can: request_module (can-proto-0) failed. [ 462.175910][T11790] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 462.355977][T11790] usb 2-1: Using ep0 maxpacket: 8 [ 462.383478][T11790] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 462.392819][T11790] usb 2-1: config 179 has no interface number 0 [ 462.410574][T11790] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 462.436015][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2258'. [ 462.450476][T11790] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 462.472856][T11790] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 462.505531][T11790] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 462.524742][T11790] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 462.538737][T11790] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 462.564228][T11790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.600717][T13100] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 462.619510][T13109] vlan2: entered promiscuous mode [ 462.857563][T11790] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input39 [ 464.815230][T11802] usb 2-1: USB disconnect, device number 70 [ 464.815326][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 464.830197][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 465.726037][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 467.932721][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2261'. [ 468.195871][T11803] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 468.225865][T11790] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 468.375949][T11803] usb 2-1: Using ep0 maxpacket: 8 [ 468.385968][T11790] usb 6-1: Using ep0 maxpacket: 8 [ 468.392934][T11790] usb 6-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 468.408723][T11803] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 468.413825][T11790] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 468.425851][T11803] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 468.455759][T11790] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 225, changing to 7 [ 468.465726][T11803] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 468.476456][T11790] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34649, setting to 1024 [ 468.485976][T11803] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 468.495765][T11790] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 468.515732][T11803] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.535842][T11786] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 468.558650][T11790] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 468.567933][T11803] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 468.568299][T11790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.585484][T11790] usb 6-1: Product: syz [ 468.590066][T11790] usb 6-1: Manufacturer: syz [ 468.594683][T11790] usb 6-1: SerialNumber: syz [ 468.595784][T11803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.632913][T11790] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 468.642806][T11790] usbtest 6-1:1.0: Linux user mode ISO test driver [ 468.652623][T11790] usbtest 6-1:1.0: high-speed {control iso-in} tests (+alt) [ 468.712181][T11786] usb 5-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 468.736392][T11786] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 468.745615][T11786] usb 5-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 468.758412][T11786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.769710][T11786] usb 5-1: config 0 descriptor?? [ 468.818457][T13136] fuse: Bad value for 'fd' [ 468.853263][T11802] usb 6-1: USB disconnect, device number 46 [ 468.861098][T11803] usb 2-1: GET_CAPABILITIES returned 0 [ 468.871539][T11803] usbtmc 2-1:16.0: can't read capabilities [ 468.990545][T11786] usb 5-1: string descriptor 0 read error: -71 [ 468.992797][T13144] openvswitch: netlink: Message has 12 unknown bytes. [ 469.001782][T11786] usb 5-1: USB disconnect, device number 90 [ 469.088248][T13151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2272'. [ 469.104199][T13151] vlan3: entered promiscuous mode [ 469.171978][T11802] usb 2-1: USB disconnect, device number 71 [ 469.178876][T13119] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 469.875878][T11802] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 469.949751][ T30] audit: type=1326 audit(1769762178.847:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413079aeb9 code=0x7fc00000 [ 470.025754][T11802] usb 6-1: Using ep0 maxpacket: 16 [ 470.033324][T11802] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 470.044923][T11802] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 470.055388][T11802] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.069729][T11802] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.079824][T11802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.095838][T11802] usb 6-1: Product: syz [ 470.106090][T11802] usb 6-1: Manufacturer: syz [ 470.117455][T11802] usb 6-1: SerialNumber: syz [ 470.540119][T11802] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 470.849653][ T9] dvb-usb: did not find the firmware file 'dvb-usb-bluebird-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 470.877580][ T9] dvb_usb_cxusb 4-1:128.10: probe with driver dvb_usb_cxusb failed with error -22 [ 470.895866][T11790] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 470.905017][ T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in cold state, will try to load a firmware [ 470.918484][ T9] usb 4-1: Direct firmware load for dvb-usb-bluebird-01.fw failed with error -2 [ 470.929194][ T9] usb 4-1: Falling back to sysfs fallback for: dvb-usb-bluebird-01.fw [ 471.078460][T11790] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 471.088635][T11790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.100067][T11790] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 471.152219][T13162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.161218][T13162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.175345][T13162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.184153][T13162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.198932][T11790] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.245948][T11790] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25708, setting to 1024 [ 471.259003][T11790] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 471.269342][ T30] audit: type=1326 audit(1769762180.167:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.3.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f413073c2d9 code=0x7fc00000 [ 471.296189][T11790] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 471.304504][T11790] usb 2-1: Product: syz [ 471.309459][T11790] usb 2-1: Manufacturer: syz [ 471.326800][T13181] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 471.336989][T11790] cdc_wdm 2-1:1.0: skipping garbage [ 471.342928][T11790] cdc_wdm 2-1:1.0: skipping garbage [ 471.353510][T11790] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 471.384232][T11790] cdc_wdm 2-1:1.0: Unknown control protocol [ 471.581440][ C1] wdm_int_callback: 211 callbacks suppressed [ 471.581460][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 471.594047][ C1] wdm_int_callback: 211 callbacks suppressed [ 471.594063][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 471.606734][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 471.613388][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 471.621749][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 471.628443][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 471.634688][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 471.641284][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 471.649773][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 471.656409][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 471.662835][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 471.669439][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 471.676078][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 471.682743][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 471.689155][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 471.695760][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 471.702087][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 471.708708][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 471.715593][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 471.722253][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 471.821826][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'. [ 471.848166][T11802] usb 6-1: USB disconnect, device number 47 [ 471.936301][ T6492] udevd[6492]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.138775][T13181] batadv0: entered promiscuous mode [ 472.146188][T13181] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 472.155415][T13181] batadv0: left promiscuous mode [ 472.504935][T13193] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2288'. [ 472.550349][T11802] usb 2-1: USB disconnect, device number 72 [ 472.697031][T13201] netlink: 'syz.0.2289': attribute type 10 has an invalid length. [ 472.741016][T13201] team0: Port device netdevsim0 added [ 472.768496][T13205] netlink: 'syz.0.2289': attribute type 10 has an invalid length. [ 472.892165][T13205] team0: Port device netdevsim0 removed [ 472.954998][T13205] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 473.387215][T13222] fuse: Unknown parameter 'grou`i 00000000000000000000' [ 473.860757][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'. [ 475.114191][T13268] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2307'. [ 476.083617][T13286] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2314'. [ 476.120256][T13288] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 476.126833][T13288] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 476.236130][T13288] vhci_hcd vhci_hcd.0: Device attached [ 476.414710][T13289] vhci_hcd: connection closed [ 476.415002][ T3516] vhci_hcd vhci_hcd.3: stop threads [ 476.431757][ T3516] vhci_hcd vhci_hcd.3: release socket [ 476.444066][ T3516] vhci_hcd vhci_hcd.3: disconnect device [ 476.466160][T11782] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 476.526012][T11803] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 476.696148][T11803] usb 5-1: Using ep0 maxpacket: 16 [ 476.703099][T11803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.721629][T11803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 476.753131][T11803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 476.783141][T11803] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 476.805840][T11803] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.847247][T11803] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 476.871536][T11803] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 476.899765][T11803] usb 5-1: Manufacturer: syz [ 476.938261][T11803] usb 5-1: config 0 descriptor?? [ 477.165510][T13303] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2318'. [ 477.180399][T13307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.210567][T13307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.246995][T13307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.260149][T13307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.308755][T13307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.436171][T11803] rc_core: IR keymap rc-hauppauge not found [ 477.446155][T13307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.466020][T11803] Registered IR keymap rc-empty [ 477.492213][T11802] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 477.500221][T11803] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 477.546003][T11803] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 477.604400][T13307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.604920][T11803] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 477.666181][T11803] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input40 [ 477.737001][T11802] usb 2-1: Using ep0 maxpacket: 16 [ 477.754874][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2320'. [ 477.774931][T11803] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 477.814285][T11802] usb 2-1: config index 0 descriptor too short (expected 14385, got 18) [ 477.824488][ C1] rc rc0: IR event FIFO is full! [ 477.829490][ C1] rc rc0: IR event FIFO is full! [ 477.834455][ C1] rc rc0: IR event FIFO is full! [ 477.839418][ C1] rc rc0: IR event FIFO is full! [ 477.844377][ C1] rc rc0: IR event FIFO is full! [ 477.849330][ C1] rc rc0: IR event FIFO is full! [ 477.854865][ C1] rc rc0: IR event FIFO is full! [ 477.859839][ C1] rc rc0: IR event FIFO is full! [ 477.865126][ C1] rc rc0: IR event FIFO is full! [ 477.870072][ C1] rc rc0: IR event FIFO is full! [ 477.875002][ C1] rc rc0: IR event FIFO is full! [ 477.879976][ C1] rc rc0: IR event FIFO is full! [ 477.884926][ C1] rc rc0: IR event FIFO is full! [ 477.889874][ C1] rc rc0: IR event FIFO is full! [ 477.896344][ C1] rc rc0: IR event FIFO is full! [ 477.897450][T13307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.909222][T13317] rc rc0: two consecutive events of type space [ 477.917343][T11802] usb 2-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 477.941333][T11802] usb 2-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 477.992478][T13307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.027081][T11803] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 478.052634][T11802] usb 2-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 478.072925][T13307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.086354][T11803] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 478.263894][T11802] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 478.275841][T11803] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 478.283196][T11802] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 478.296676][T11802] usb 2-1: Product: syz [ 478.306023][T11803] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 478.326512][T11802] usb 2-1: Manufacturer: syz [ 478.346184][T11803] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 478.370064][T11802] usb 2-1: SerialNumber: syz [ 478.405246][T11803] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 478.458945][T11803] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 478.625815][T11803] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 478.704888][T11803] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 478.743682][T11803] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 478.763666][T11803] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 478.819564][T11803] usb 5-1: USB disconnect, device number 91 [ 478.865802][T11790] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 479.020195][T11790] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 479.030015][T11790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.040623][T11790] usb 6-1: Product: syz [ 479.056139][T11790] usb 6-1: Manufacturer: syz [ 479.076591][T11790] usb 6-1: SerialNumber: syz [ 480.056016][T11802] usb 2-1: USB disconnect, device number 73 [ 480.216630][T11790] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 480.235855][T11790] usb 6-1: 2:1 : sample bitwidth 205 in over sample bytes 18 [ 480.243286][T11790] usb 6-1: 2:1 : unsupported sample bitwidth 205 in 18 bytes [ 480.353588][T11790] usb 6-1: USB disconnect, device number 48 [ 480.427660][ T6493] udevd[6493]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.015930][T11790] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 481.375754][T11790] usb 2-1: Using ep0 maxpacket: 32 [ 481.417892][T11790] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 481.426205][T11786] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 481.434367][T11790] usb 2-1: config 0 has no interface number 0 [ 481.681040][T11790] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 481.711005][T11790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.779792][T11790] usb 2-1: Product: syz [ 481.794394][T11790] usb 2-1: Manufacturer: syz [ 481.803589][T11786] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 481.818609][T11790] usb 2-1: SerialNumber: syz [ 481.835095][T11786] usb 5-1: config 0 has no interface number 0 [ 481.863332][T11790] usb 2-1: config 0 descriptor?? [ 481.885406][T11790] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 481.996735][T11786] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 482.008362][T11786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.036326][T11786] usb 5-1: Product: syz [ 482.040580][T11786] usb 5-1: Manufacturer: syz [ 482.045228][T11786] usb 5-1: SerialNumber: syz [ 482.066379][T11786] usb 5-1: config 0 descriptor?? [ 482.237239][T11790] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 482.342591][T11790] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 482.569560][T13360] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 483.295038][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 483.303701][T11790] usb 2-1: USB disconnect, device number 74 [ 483.320622][T11790] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 483.371682][T11790] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 483.409933][T11790] quatech2 2-1:0.51: device disconnected [ 483.492688][T13382] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2342'. [ 484.236342][T11786] asix 5-1:0.251: probe with driver asix failed with error -71 [ 484.254857][T11786] usb 5-1: USB disconnect, device number 92 [ 484.773555][T13402] can: request_module (can-proto-0) failed. [ 484.897556][T13410] syzkaller1: entered promiscuous mode [ 484.907468][T11786] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 484.941577][T13410] syzkaller1: entered allmulticast mode [ 485.096919][T11786] usb 5-1: Using ep0 maxpacket: 16 [ 485.120845][T11786] usb 5-1: config 0 has no interfaces? [ 485.145464][T11786] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 485.180192][T11786] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 485.201426][T11786] usb 5-1: Manufacturer: syz [ 485.236696][T11786] usb 5-1: config 0 descriptor?? [ 485.393235][T13418] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2353'. [ 485.710545][T13433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.023156][T11803] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 486.195963][T11803] usb 2-1: device descriptor read/64, error -71 [ 486.540844][T11803] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 486.825779][T11803] usb 2-1: device descriptor read/64, error -71 [ 486.938243][T11803] usb usb2-port1: attempt power cycle [ 487.286987][T11803] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 487.306497][T11803] usb 2-1: device descriptor read/8, error -71 [ 487.355890][T13453] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2362'. [ 487.363982][T13454] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2360'. [ 487.454415][T13457] syzkaller0: entered promiscuous mode [ 487.460698][T13457] syzkaller0: entered allmulticast mode [ 487.601209][T13461] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2364'. [ 487.610844][T11803] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 487.676415][T11803] usb 2-1: device descriptor read/8, error -71 [ 487.806838][T11803] usb usb2-port1: unable to enumerate USB device [ 487.854498][T11803] usb 5-1: USB disconnect, device number 93 [ 489.365818][T11803] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 489.381210][T13489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.390673][T13489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.448033][T13492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2373'. [ 489.526222][ T24] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 489.528802][T11803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 489.528863][T11803] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 489.528887][T11803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.531329][T11803] usb 2-1: config 0 descriptor?? [ 489.535173][T11803] smsusb:smsusb_probe: board id=8, interface number 0 [ 489.537253][T11803] smsusb:smsusb_probe: Device initialized with return code -19 [ 489.576844][T13499] syzkaller0: entered promiscuous mode [ 489.576871][T13499] syzkaller0: entered allmulticast mode [ 489.692373][ T24] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 489.692406][ T24] usb 6-1: config 0 has no interface number 0 [ 489.692445][ T24] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.692469][ T24] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.692493][ T24] usb 6-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.693436][ T24] usb 6-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 489.693463][ T24] usb 6-1: New USB device strings: Mfr=51, Product=0, SerialNumber=0 [ 489.693490][ T24] usb 6-1: Manufacturer: syz [ 489.696246][ T24] usb 6-1: config 0 descriptor?? [ 489.821577][ T5885] usb 2-1: USB disconnect, device number 79 [ 490.180781][ T24] uclogic 0003:28BD:0935.0014: interface is invalid, ignoring [ 490.295843][T11803] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 490.396212][ T5885] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 490.431482][T13517] FAULT_INJECTION: forcing a failure. [ 490.431482][T13517] name failslab, interval 1, probability 0, space 0, times 0 [ 490.488551][T13517] CPU: 0 UID: 0 PID: 13517 Comm: syz.3.2379 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.488575][T13517] Tainted: [L]=SOFTLOCKUP [ 490.488579][T13517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 490.488586][T13517] Call Trace: [ 490.488591][T13517] [ 490.488597][T13517] dump_stack_lvl+0xe8/0x150 [ 490.488617][T13517] should_fail_ex+0x412/0x560 [ 490.488634][T13517] should_failslab+0xa8/0x100 [ 490.488649][T13517] __kmalloc_noprof+0xde/0x7e0 [ 490.488659][T13517] ? tomoyo_encode+0x28b/0x550 [ 490.488675][T13517] tomoyo_encode+0x28b/0x550 [ 490.488691][T13517] tomoyo_realpath_from_path+0x58d/0x5d0 [ 490.488709][T13517] ? tomoyo_path_number_perm+0x219/0x630 [ 490.488720][T13517] tomoyo_path_number_perm+0x246/0x630 [ 490.488733][T13517] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 490.488743][T13517] ? __lock_acquire+0x6b5/0x2cf0 [ 490.488765][T13517] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 490.488786][T13517] ? __fget_files+0x2a/0x420 [ 490.488799][T13517] ? __fget_files+0x2a/0x420 [ 490.488810][T13517] ? __fget_files+0x3a0/0x420 [ 490.488822][T13517] ? __fget_files+0x2a/0x420 [ 490.488835][T13517] security_file_ioctl+0xc3/0x2a0 [ 490.488847][T13517] __se_sys_ioctl+0x47/0x170 [ 490.488863][T13517] do_syscall_64+0xe2/0xf80 [ 490.488874][T13517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.488884][T13517] ? trace_irq_disable+0x37/0x100 [ 490.488894][T13517] ? clear_bhb_loop+0x60/0xb0 [ 490.488906][T13517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.488916][T13517] RIP: 0033:0x7f413079aeb9 [ 490.488926][T13517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.488934][T13517] RSP: 002b:00007f41315c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.488947][T13517] RAX: ffffffffffffffda RBX: 00007f4130a16090 RCX: 00007f413079aeb9 [ 490.488954][T13517] RDX: 0000200000000040 RSI: 00000000c0f85403 RDI: 0000000000000007 [ 490.488961][T13517] RBP: 00007f41315c1090 R08: 0000000000000000 R09: 0000000000000000 [ 490.488968][T13517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.488973][T13517] R13: 00007f4130a16128 R14: 00007f4130a16090 R15: 00007f4130b3fa48 [ 490.488989][T13517] [ 490.489004][T13517] ERROR: Out of memory at tomoyo_realpath_from_path. [ 490.735782][T11803] usb 5-1: Using ep0 maxpacket: 16 [ 490.754284][T13514] netlink: 'syz.0.2378': attribute type 4 has an invalid length. [ 490.839670][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 490.852733][ T5885] usb 2-1: config 0 has an invalid interface number: 194 but max is 0 [ 491.013178][ T5885] usb 2-1: config 0 has no interface number 0 [ 491.020395][T11803] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 491.032456][T11803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.056589][T11803] usb 5-1: config 0 has no interface number 0 [ 491.063618][ T5885] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 491.074782][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.112023][T11803] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 491.149608][T11786] usb 6-1: USB disconnect, device number 49 [ 491.175135][ T5885] usb 2-1: Product: syz [ 491.180343][T11803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.195861][ T5885] usb 2-1: Manufacturer: syz [ 491.210763][ T5885] usb 2-1: SerialNumber: syz [ 491.217002][T11803] usb 5-1: Product: syz [ 491.242742][T11803] usb 5-1: Manufacturer: syz [ 491.249497][ T5885] usb 2-1: config 0 descriptor?? [ 491.275008][T11803] usb 5-1: SerialNumber: syz [ 491.328077][ T5885] cypress_cy7c63 2-1:0.194: Cypress CY7C63xxx device now attached [ 491.342389][T11803] usb 5-1: config 0 descriptor?? [ 491.457975][T11803] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 491.520416][T11803] uvcvideo 5-1:0.105: No valid video chain found. [ 491.548069][T11786] usb 2-1: USB disconnect, device number 80 [ 491.556135][T11786] cypress_cy7c63 2-1:0.194: Cypress CY7C63xxx device now disconnected [ 491.728498][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 492.210310][T13541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2385'. [ 492.465360][T13543] syzkaller0: entered promiscuous mode [ 492.483345][T13543] syzkaller0: entered allmulticast mode [ 492.539801][T13547] netlink: 752 bytes leftover after parsing attributes in process `syz.0.2387'. [ 492.569958][T13545] vlan3: entered allmulticast mode [ 492.580880][T13550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.589651][T13545] bond0: entered allmulticast mode [ 492.611983][T13550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.621167][T13545] bond_slave_0: entered allmulticast mode [ 492.638563][T13547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2387'. [ 492.651401][T13550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.665139][T13545] bond_slave_1: entered allmulticast mode [ 492.673709][T13550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.682894][T13545] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 492.702733][T13550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.719459][T13553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.757153][T13550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.762210][T13553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.793490][T11787] usb 5-1: USB disconnect, device number 94 [ 492.860231][T13553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.888313][T13553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.695788][T11787] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 493.766755][T13576] netlink: 196240 bytes leftover after parsing attributes in process `syz.4.2395'. [ 493.865840][T11787] usb 2-1: Using ep0 maxpacket: 8 [ 493.879575][T11787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.893179][T11787] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 493.910198][T11787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.927378][T11787] usb 2-1: Product: syz [ 493.937474][T11787] usb 2-1: Manufacturer: syz [ 493.951172][T11787] usb 2-1: SerialNumber: syz [ 493.970812][T11787] usb 2-1: config 0 descriptor?? [ 493.987424][T11787] cdc_phonet 2-1:0.0: probe with driver cdc_phonet failed with error -22 [ 494.035829][T11803] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 494.128563][T13579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2396'. [ 494.176110][T11803] usb 5-1: device descriptor read/64, error -71 [ 494.201222][T11787] usb 2-1: USB disconnect, device number 81 [ 494.435928][T11803] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 494.575834][T11803] usb 5-1: device descriptor read/64, error -71 [ 494.697424][T11803] usb usb5-port1: attempt power cycle [ 495.196698][T11803] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 495.242659][T11803] usb 5-1: device descriptor read/8, error -71 [ 495.485901][T11803] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 495.643495][T11803] usb 5-1: device descriptor read/8, error -71 [ 495.772927][T11803] usb usb5-port1: unable to enumerate USB device [ 495.954348][T13613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 495.960837][T13613] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 495.970258][T13613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 495.976998][T13613] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 495.992765][T13613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 496.017909][T13613] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 496.027695][T13613] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 496.121843][T11803] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 496.131801][T13613] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 496.147550][T13613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 496.153863][T13613] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 496.462173][T11803] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 496.474678][T11803] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 496.492487][T11803] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 496.506479][T11803] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 496.742651][T11803] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 496.775404][T11803] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 496.784179][T11803] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 496.797767][T11803] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 496.844221][T11803] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 496.880512][T11803] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 496.939533][T11803] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 496.958665][T11803] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 496.981395][T11803] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 497.015322][T11803] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 497.041349][T13630] sctp: [Deprecated]: syz.4.2410 (pid 13630) Use of int in maxseg socket option. [ 497.041349][T13630] Use struct sctp_assoc_value instead [ 497.148651][T11803] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 497.230711][T11803] usb 6-1: string descriptor 0 read error: -22 [ 497.238343][T11803] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 497.257919][T11803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.344375][T11803] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 499.078369][ T30] audit: type=1326 audit(1769762207.977:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.1.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadc39aeb9 code=0x7ffc0000 [ 499.102973][ T30] audit: type=1326 audit(1769762207.977:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.1.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadc39aeb9 code=0x7ffc0000 [ 499.126199][ T30] audit: type=1326 audit(1769762208.007:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.1.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadc39aeb9 code=0x7ffc0000 [ 499.149401][ T30] audit: type=1326 audit(1769762208.007:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.1.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadc39aeb9 code=0x7ffc0000 [ 499.172769][ T30] audit: type=1326 audit(1769762208.007:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.1.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcadc39aeb9 code=0x7ffc0000 [ 499.367586][ T30] audit: type=1326 audit(1769762208.007:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.1.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadc39aeb9 code=0x7ffc0000 [ 499.396177][ T30] audit: type=1326 audit(1769762208.007:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.1.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadc39aeb9 code=0x7ffc0000 [ 499.419635][ T30] audit: type=1326 audit(1769762208.027:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.1.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadc39aeb9 code=0x7ffc0000 [ 499.444565][ T30] audit: type=1326 audit(1769762208.027:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.1.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadc39aeb9 code=0x7ffc0000 [ 499.486398][ T30] audit: type=1326 audit(1769762208.027:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.1.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fcadc39aeb9 code=0x7ffc0000 [ 499.646884][T11803] usb 6-1: USB disconnect, device number 50 [ 499.711716][T13671] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2424'. [ 499.766989][T13673] binder: 13672:13673 unknown command 0 [ 499.772606][T13673] binder: 13672:13673 ioctl c0306201 200000000640 returned -22 [ 500.314073][T13674] bond1: option mode: invalid value (255) [ 500.334789][T13674] bond1 (unregistering): Released all slaves [ 501.048198][T13699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.570874][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 501.575678][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.585875][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.656717][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'. [ 501.679617][T13708] netlink: 'syz.4.2433': attribute type 2 has an invalid length. [ 501.781496][T13708] : entered promiscuous mode [ 502.065931][T11787] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 502.166859][T13713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2434'. [ 502.297756][T11787] usb 5-1: unable to get BOS descriptor or descriptor too short [ 502.308380][T11787] usb 5-1: not running at top speed; connect to a high speed hub [ 502.318021][T11787] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 502.354399][T11787] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 502.414739][T11787] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 502.444782][T11787] usb 5-1: config 129 has no interface number 0 [ 502.488219][T11787] usb 5-1: config 129 has no interface number 1 [ 502.504954][T11787] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 502.781764][T11787] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 502.828673][T11787] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 502.895759][T11787] usb 5-1: config 129 interface 135 has no altsetting 0 [ 502.902864][T11787] usb 5-1: config 129 interface 5 has no altsetting 0 [ 502.914459][T11787] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 502.926068][T11787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.945748][T11787] usb 5-1: Manufacturer: с [ 502.958014][T11787] usb 5-1: SerialNumber: Ꮃ�盤䵠磤듙᥃嘃ﴤ鱩榶岪႔ᒫ瓼미쐢፵㰵鋒᧒狯澆狷셅谔䥽 [ 503.229585][T11787] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.252207][T11787] usb 5-1: MIDIStreaming interface descriptor not found [ 503.689195][T11787] usb 5-1: USB disconnect, device number 99 [ 504.276029][ T24] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 504.334030][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2441'. [ 504.376496][T13737] vlan4: entered promiscuous mode [ 504.435785][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 504.451784][ T24] usb 6-1: config 0 has an invalid interface number: 190 but max is 1 [ 504.460582][ T24] usb 6-1: config 0 has an invalid interface number: 2 but max is 1 [ 504.470679][T13745] netlink: 'syz.4.2443': attribute type 12 has an invalid length. [ 504.489580][ T24] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 504.526069][ T24] usb 6-1: config 0 has no interface number 1 [ 504.545056][ T24] usb 6-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 504.925742][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 504.925765][ T30] audit: type=1326 audit(1769762213.817:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.1.2442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcadc39aeb9 code=0x0 [ 504.966672][ T24] usb 6-1: config 0 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 505.024502][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 505.034435][ T24] usb 6-1: config 0 interface 2 has no altsetting 0 [ 505.067624][ T24] usb 6-1: New USB device found, idVendor=0499, idProduct=150a, bcdDevice=f6.7f [ 505.079778][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.089103][ T24] usb 6-1: Product: syz [ 505.093443][ T24] usb 6-1: Manufacturer: syz [ 505.098818][ T24] usb 6-1: SerialNumber: syz [ 505.120292][ T24] usb 6-1: config 0 descriptor?? [ 505.140658][ T30] audit: type=1326 audit(1769762214.027:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.0.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5177b9aeb9 code=0x7ffc0000 [ 505.186237][ T30] audit: type=1326 audit(1769762214.027:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.0.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5177b9aeb9 code=0x7ffc0000 [ 505.305993][ T30] audit: type=1326 audit(1769762214.027:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.0.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5177b9aeb9 code=0x7ffc0000 [ 505.331780][ T30] audit: type=1326 audit(1769762214.027:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.0.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5177b9aeb9 code=0x7ffc0000 [ 505.425431][ T30] audit: type=1326 audit(1769762214.027:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.0.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5177b9aeb9 code=0x7ffc0000 [ 505.438595][ T24] usb 6-1: selecting invalid altsetting 0 [ 505.485166][ T30] audit: type=1326 audit(1769762214.027:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.0.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f5177b9aeb9 code=0x7ffc0000 [ 505.535314][ T30] audit: type=1326 audit(1769762214.027:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.0.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5177b9aeb9 code=0x7ffc0000 [ 505.547584][ T24] usb 6-1: USB disconnect, device number 51 [ 505.586014][ T30] audit: type=1326 audit(1769762214.027:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.0.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5177b9aeb9 code=0x7ffc0000 [ 505.586787][ T6493] udevd[6493]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.190/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.625555][ T30] audit: type=1326 audit(1769762214.027:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.0.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5177b9aeb9 code=0x7ffc0000 [ 505.653610][T13755] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2445'. [ 506.645843][T11787] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 506.665876][ T982] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 506.798662][T11787] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 506.807359][T11787] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 506.817698][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 506.827040][T11787] usb 6-1: config 8 has no interface number 0 [ 506.840131][ T982] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 506.849508][T11787] usb 6-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 506.870134][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.883552][T11787] usb 6-1: config 8 interface 177 has no altsetting 0 [ 506.893899][ T982] usb 2-1: Product: syz [ 506.901575][ T982] usb 2-1: Manufacturer: syz [ 506.906869][T11787] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 506.918998][ T982] usb 2-1: SerialNumber: syz [ 506.928046][T11787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.941120][ T982] usb 2-1: config 0 descriptor?? [ 506.964032][T11787] ir_toy 6-1:8.177: required endpoints not found [ 507.155521][ T982] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 507.475772][ T24] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 507.588061][ T982] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 507.603161][ T982] usb 2-1: USB disconnect, device number 82 [ 507.639041][ T24] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 507.652473][ T24] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 507.664051][ T24] usb 5-1: config 8 has no interface number 0 [ 507.670672][ T24] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 507.684569][ T24] usb 5-1: config 8 interface 177 has no altsetting 0 [ 507.691712][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 507.701609][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.720945][ T24] ir_toy 5-1:8.177: required endpoints not found [ 509.578479][T11803] usb 6-1: USB disconnect, device number 52 [ 510.157225][ T982] usb 5-1: USB disconnect, device number 100 [ 510.619260][ T982] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 510.795780][ T982] usb 5-1: Using ep0 maxpacket: 16 [ 510.803980][ T982] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 510.812733][ T982] usb 5-1: config 0 has no interface number 0 [ 510.825500][ T982] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 510.837824][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.846382][ T982] usb 5-1: Product: syz [ 510.850908][ T982] usb 5-1: Manufacturer: syz [ 510.856758][ T982] usb 5-1: SerialNumber: syz [ 510.869904][ T982] usb 5-1: config 0 descriptor?? [ 510.879619][ T982] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 511.269508][T13859] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2478'. [ 511.531700][T13866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.544097][T13866] kvm: vcpu 0: requested 57344 ns lapic timer period limited to 200000 ns [ 511.555032][T13851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.564284][T13851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.685811][T11790] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 511.838327][T11790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.849335][T11790] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 511.860700][T11790] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 511.872480][T11790] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 511.882630][T11790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.899984][T13862] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 511.915516][T11790] hub 2-1:1.0: bad descriptor, ignoring hub [ 511.930467][T11790] hub 2-1:1.0: probe with driver hub failed with error -5 [ 511.950503][T11790] cdc_wdm 2-1:1.0: skipping garbage [ 511.956270][T11790] cdc_wdm 2-1:1.0: skipping garbage [ 511.972487][T11790] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 511.982164][T11790] cdc_wdm 2-1:1.0: Unknown control protocol [ 512.302279][ C1] wdm_int_callback: 4078 callbacks suppressed [ 512.302299][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 512.315184][ C1] wdm_int_callback: 4078 callbacks suppressed [ 512.315209][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 512.327831][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 512.334456][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 512.340610][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 512.491404][T11790] usb 2-1: USB disconnect, device number 83 [ 512.633348][T13851] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 512.678010][ T982] gspca_spca1528: reg_r err -71 [ 512.694405][ T982] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 512.714849][ T982] usb 5-1: USB disconnect, device number 101 [ 512.753231][T13877] netlink: 'syz.5.2485': attribute type 10 has an invalid length. [ 512.781412][T13877] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 512.830947][T13877] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 512.837980][T13875] kvm: kvm [13874]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 512.853744][T13875] kvm: kvm [13874]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 512.874585][T13875] kvm: kvm [13874]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 512.915389][T13875] kvm: kvm [13874]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 512.950870][T13875] kvm: kvm [13874]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 513.179336][T13885] netlink: 'syz.5.2486': attribute type 46 has an invalid length. [ 513.427724][T13893] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1728497071 (13827976568 ns) > initial count (134217856 ns). Using initial count to start timer. [ 513.816139][T11803] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 513.958697][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2496'. [ 513.982993][T13913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2496'. [ 514.077335][T11803] usb 2-1: Using ep0 maxpacket: 16 [ 514.090162][T11803] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 514.102450][T11803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 514.184121][T11803] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 514.197397][T11803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.222784][T11803] usb 2-1: Product: syz [ 514.234426][T11803] usb 2-1: Manufacturer: syz [ 514.249409][T11803] usb 2-1: SerialNumber: syz [ 514.265086][T11803] usb 2-1: config 0 descriptor?? [ 514.283678][T11803] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 514.294641][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2497'. [ 514.347842][T11803] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 514.477279][T13918] bridge_slave_1: left allmulticast mode [ 514.495820][T13918] bridge_slave_1: left promiscuous mode [ 514.522316][T13918] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.553081][T13918] bridge_slave_0: left allmulticast mode [ 514.571632][T13918] bridge_slave_0: left promiscuous mode [ 514.588136][T13918] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.803110][T13927] tipc: Enabled bearer , priority 15 [ 514.902840][T11803] em28xx 2-1:0.0: unknown em28xx chip ID (249) [ 514.994004][T13932] syzkaller0: entered promiscuous mode [ 515.000969][T13932] syzkaller0: entered allmulticast mode [ 515.104168][T11803] em28xx 2-1:0.0: Config register raw data: 0xf9 [ 515.110992][T11803] em28xx 2-1:0.0: I2S Audio (5 sample rate(s)) [ 515.117709][T11803] em28xx 2-1:0.0: No AC97 audio processor [ 515.188120][T13937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.273308][T13938] geneve2: entered promiscuous mode [ 515.279208][T13938] geneve2: entered allmulticast mode [ 515.520682][T11803] usb 2-1: USB disconnect, device number 84 [ 516.284429][T13957] xt_TCPMSS: Only works on TCP SYN packets [ 517.254552][T13961] syzkaller0: entered promiscuous mode [ 517.260734][T13961] syzkaller0: entered allmulticast mode [ 517.596545][ T982] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 517.695935][ T24] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 517.755933][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 517.772713][ T982] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 517.787783][ T982] usb 2-1: config 0 has no interface number 0 [ 517.794175][ T982] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 517.871322][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 517.878135][ T24] usb 6-1: config 0 has an invalid interface number: 24 but max is 0 [ 517.898219][ T24] usb 6-1: config 0 has no interface number 0 [ 517.945912][ T24] usb 6-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.973492][ T24] usb 6-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.984158][ T982] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 518.038749][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.062770][ T24] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 518.076026][ T982] usb 2-1: Product: syz [ 518.086021][ T982] usb 2-1: Manufacturer: syz [ 518.093069][ T982] usb 2-1: SerialNumber: syz [ 518.099709][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.144466][ T982] usb 2-1: config 0 descriptor?? [ 518.149714][ T24] usb 6-1: config 0 descriptor?? [ 518.315189][ T982] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 518.345023][ T982] em28xx 2-1:0.132: Video interface 132 found: [ 518.723627][ T982] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 519.060442][T13988] bond0: left allmulticast mode [ 519.075547][T13988] bond_slave_0: left allmulticast mode [ 519.087183][T13988] bond_slave_1: left allmulticast mode [ 519.100768][T13988] bond0: left promiscuous mode [ 519.133403][T13988] bond_slave_0: left promiscuous mode [ 519.174616][T13988] bond_slave_1: left promiscuous mode [ 519.201799][ T982] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 519.217435][T13988] bridge0: port 3(bond0) entered disabled state [ 519.246048][ T982] em28xx 2-1:0.132: board has no eeprom [ 519.315452][T13988] bridge_slave_1: left allmulticast mode [ 519.336469][T13988] bridge_slave_1: left promiscuous mode [ 519.386486][T13988] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.429544][T13988] bridge_slave_0: left allmulticast mode [ 519.435305][T13988] bridge_slave_0: left promiscuous mode [ 519.460488][T13988] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.925012][T13995] FAULT_INJECTION: forcing a failure. [ 519.925012][T13995] name failslab, interval 1, probability 0, space 0, times 0 [ 519.953710][T13995] CPU: 1 UID: 0 PID: 13995 Comm: syz.4.2525 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.953742][T13995] Tainted: [L]=SOFTLOCKUP [ 519.953749][T13995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 519.953758][T13995] Call Trace: [ 519.953766][T13995] [ 519.953777][T13995] dump_stack_lvl+0xe8/0x150 [ 519.953808][T13995] should_fail_ex+0x412/0x560 [ 519.953843][T13995] should_failslab+0xa8/0x100 [ 519.953867][T13995] __kmalloc_cache_noprof+0x83/0x6e0 [ 519.953887][T13995] ? __io_uring_add_tctx_node+0x148/0x4f0 [ 519.953911][T13995] __io_uring_add_tctx_node+0x148/0x4f0 [ 519.953934][T13995] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 519.953956][T13995] ? __fget_files+0x2a/0x420 [ 519.953978][T13995] ? __fget_files+0x2a/0x420 [ 519.953999][T13995] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 519.954022][T13995] __se_sys_io_uring_enter+0x263b/0x2c30 [ 519.954047][T13995] ? ksys_write+0x1e6/0x270 [ 519.954064][T13995] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 519.954083][T13995] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 519.954109][T13995] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 519.954131][T13995] ? __fget_files+0x3a0/0x420 [ 519.954156][T13995] ? fput+0xa0/0xd0 [ 519.954172][T13995] ? ksys_write+0x242/0x270 [ 519.954186][T13995] ? __pfx_ksys_write+0x10/0x10 [ 519.954203][T13995] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 519.954219][T13995] do_syscall_64+0xe2/0xf80 [ 519.954237][T13995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.954252][T13995] ? trace_irq_disable+0x37/0x100 [ 519.954270][T13995] ? clear_bhb_loop+0x60/0xb0 [ 519.954287][T13995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.954303][T13995] RIP: 0033:0x7fd97259aeb9 [ 519.954321][T13995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.954337][T13995] RSP: 002b:00007fd9733d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 519.954359][T13995] RAX: ffffffffffffffda RBX: 00007fd972816090 RCX: 00007fd97259aeb9 [ 519.954372][T13995] RDX: 0000000000003900 RSI: 00000000000006e2 RDI: 0000000000000003 [ 519.954382][T13995] RBP: 00007fd9733d9090 R08: 0000000000000000 R09: 0000000000000000 [ 519.954390][T13995] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 519.954400][T13995] R13: 00007fd972816128 R14: 00007fd972816090 R15: 00007fd97293fa48 [ 519.954428][T13995] [ 520.345877][ T982] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 520.397054][ T982] em28xx 2-1:0.132: analog set to bulk mode. [ 520.410514][T11790] em28xx 2-1:0.132: Registering V4L2 extension [ 520.497419][ T24] usbhid 6-1:0.24: can't add hid device: -71 [ 520.503585][ T24] usbhid 6-1:0.24: probe with driver usbhid failed with error -71 [ 520.522488][ T24] usb 6-1: USB disconnect, device number 53 [ 520.572694][T11790] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 520.596668][T13998] syzkaller0: entered promiscuous mode [ 520.602452][T13998] syzkaller0: entered allmulticast mode [ 520.614916][T11790] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 520.638273][T11790] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 520.657482][T11790] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 520.704318][T11790] em28xx 2-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 520.724225][T11790] em28xx 2-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 520.745084][T11790] em28xx 2-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 520.761684][T11790] em28xx 2-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 520.831807][ T24] usb 2-1: USB disconnect, device number 85 [ 520.856950][ T24] em28xx 2-1:0.132: Disconnecting em28xx [ 520.882986][T11790] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 520.893792][T11790] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 520.916827][T11790] em28xx 2-1:0.132: No AC97 audio processor [ 520.936792][T11790] usb 2-1: Decoder not found [ 520.941445][T11790] em28xx 2-1:0.132: failed to create media graph [ 520.991288][T11790] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 521.011375][T11790] em28xx 2-1:0.132: Remote control support is not available for this card. [ 521.016332][T14005] ================================================================== [ 521.028184][T14005] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 521.035592][T14005] Read of size 8 at addr ffff88806a2a8740 by task v4l_id/14005 [ 521.043153][T14005] [ 521.045497][T14005] CPU: 1 UID: 0 PID: 14005 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 521.045527][T14005] Tainted: [L]=SOFTLOCKUP [ 521.045534][T14005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 521.045546][T14005] Call Trace: [ 521.045555][T14005] [ 521.045563][T14005] dump_stack_lvl+0xe8/0x150 [ 521.045590][T14005] print_report+0xba/0x230 [ 521.045610][T14005] ? v4l2_fh_open+0xac/0x420 [ 521.045629][T14005] kasan_report+0x117/0x150 [ 521.045648][T14005] ? v4l2_fh_open+0xac/0x420 [ 521.045666][T14005] v4l2_fh_open+0xac/0x420 [ 521.045683][T14005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 521.045702][T14005] em28xx_v4l2_open+0x157/0x9a0 [ 521.045725][T14005] ? do_raw_spin_lock+0x12b/0x2f0 [ 521.045745][T14005] v4l2_open+0x1bf/0x3a0 [ 521.045768][T14005] chrdev_open+0x4cd/0x5e0 [ 521.045786][T14005] ? __pfx_chrdev_open+0x10/0x10 [ 521.045802][T14005] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 521.045826][T14005] ? __pfx_chrdev_open+0x10/0x10 [ 521.045842][T14005] do_dentry_open+0x7ce/0x1420 [ 521.045867][T14005] vfs_open+0x3b/0x340 [ 521.045884][T14005] ? path_openat+0x346e/0x3e20 [ 521.045907][T14005] path_openat+0x3486/0x3e20 [ 521.045941][T14005] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 521.045963][T14005] ? getname_flags+0xb7/0x540 [ 521.045981][T14005] ? __pfx_path_openat+0x10/0x10 [ 521.046013][T14005] ? __lock_acquire+0x6b5/0x2cf0 [ 521.046040][T14005] do_filp_open+0x22d/0x490 [ 521.046063][T14005] ? __pfx_do_filp_open+0x10/0x10 [ 521.046093][T14005] ? _raw_spin_unlock+0x28/0x50 [ 521.046115][T14005] ? alloc_fd+0x64b/0x6c0 [ 521.046134][T14005] do_sys_openat2+0x12f/0x220 [ 521.046154][T14005] ? __pfx_do_sys_openat2+0x10/0x10 [ 521.046172][T14005] ? exc_page_fault+0x6a/0xc0 [ 521.046191][T14005] ? do_user_addr_fault+0xc7c/0x1360 [ 521.046215][T14005] __x64_sys_openat+0x138/0x170 [ 521.046236][T14005] do_syscall_64+0xe2/0xf80 [ 521.046254][T14005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.046271][T14005] ? trace_irq_disable+0x37/0x100 [ 521.046288][T14005] ? clear_bhb_loop+0x60/0xb0 [ 521.046306][T14005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.046323][T14005] RIP: 0033:0x7f3a634a7407 [ 521.046341][T14005] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 521.046358][T14005] RSP: 002b:00007fffa26ef8f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 521.046377][T14005] RAX: ffffffffffffffda RBX: 00007f3a63bed880 RCX: 00007f3a634a7407 [ 521.046390][T14005] RDX: 0000000000000000 RSI: 00007fffa26f0f1c RDI: ffffffffffffff9c [ 521.046402][T14005] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 521.046414][T14005] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 521.046425][T14005] R13: 00007fffa26efb40 R14: 00007f3a63d54000 R15: 000055d71cac94d8 [ 521.046445][T14005] [ 521.046452][T14005] [ 521.330635][T14005] Allocated by task 11790: [ 521.335070][T14005] kasan_save_track+0x3e/0x80 [ 521.339767][T14005] __kasan_kmalloc+0x93/0xb0 [ 521.344374][T14005] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 521.349741][T14005] em28xx_v4l2_init+0x10b/0x2e70 [ 521.354682][T14005] em28xx_init_extension+0x120/0x1c0 [ 521.359964][T14005] process_scheduled_works+0xaec/0x17a0 [ 521.365512][T14005] worker_thread+0xda6/0x1360 [ 521.370193][T14005] kthread+0x726/0x8b0 [ 521.374263][T14005] ret_from_fork+0x51b/0xa40 [ 521.378863][T14005] ret_from_fork_asm+0x1a/0x30 [ 521.383636][T14005] [ 521.385957][T14005] Freed by task 11790: [ 521.390011][T14005] kasan_save_track+0x3e/0x80 [ 521.394683][T14005] kasan_save_free_info+0x46/0x50 [ 521.399714][T14005] __kasan_slab_free+0x5c/0x80 [ 521.404470][T14005] kfree+0x1be/0x650 [ 521.408364][T14005] em28xx_v4l2_init+0x1683/0x2e70 [ 521.413391][T14005] em28xx_init_extension+0x120/0x1c0 [ 521.418679][T14005] process_scheduled_works+0xaec/0x17a0 [ 521.424226][T14005] worker_thread+0xda6/0x1360 [ 521.428906][T14005] kthread+0x726/0x8b0 [ 521.432973][T14005] ret_from_fork+0x51b/0xa40 [ 521.437567][T14005] ret_from_fork_asm+0x1a/0x30 [ 521.442334][T14005] [ 521.444652][T14005] The buggy address belongs to the object at ffff88806a2a8000 [ 521.444652][T14005] which belongs to the cache kmalloc-8k of size 8192 [ 521.458699][T14005] The buggy address is located 1856 bytes inside of [ 521.458699][T14005] freed 8192-byte region [ffff88806a2a8000, ffff88806a2aa000) [ 521.472674][T14005] [ 521.474999][T14005] The buggy address belongs to the physical page: [ 521.481421][T14005] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a2a8 [ 521.490187][T14005] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 521.498692][T14005] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 521.506230][T14005] page_type: f5(slab) [ 521.510204][T14005] raw: 00fff00000000040 ffff88813fe27280 ffffea000140be00 dead000000000002 [ 521.518826][T14005] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 521.527404][T14005] head: 00fff00000000040 ffff88813fe27280 ffffea000140be00 dead000000000002 [ 521.536064][T14005] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 521.544725][T14005] head: 00fff00000000003 ffffea0001a8aa01 00000000ffffffff 00000000ffffffff [ 521.553394][T14005] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 521.562053][T14005] page dumped because: kasan: bad access detected [ 521.568478][T14005] page_owner tracks the page as allocated [ 521.574186][T14005] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13660, tgid 13660 (syz.1.2421), ts 499125937938, free_ts 498387943604 [ 521.595726][T14005] post_alloc_hook+0x228/0x280 [ 521.600491][T14005] get_page_from_freelist+0x24dc/0x2580 [ 521.606033][T14005] __alloc_frozen_pages_noprof+0x18d/0x380 [ 521.611834][T14005] alloc_pages_mpol+0x232/0x4a0 [ 521.616689][T14005] allocate_slab+0x86/0x3a0 [ 521.621201][T14005] ___slab_alloc+0xd82/0x1760 [ 521.625871][T14005] __slab_alloc+0x65/0x100 [ 521.630284][T14005] __kmalloc_cache_noprof+0x40d/0x6e0 [ 521.635744][T14005] audit_log_d_path+0xb8/0x1a0 [ 521.640645][T14005] audit_log_d_path_exe+0x42/0x70 [ 521.645863][T14005] audit_log_task+0x2c3/0x3d0 [ 521.650552][T14005] audit_seccomp+0x85/0x190 [ 521.655064][T14005] __seccomp_filter+0xd48/0x1ef0 [ 521.659996][T14005] syscall_trace_enter+0xa9/0x160 [ 521.665026][T14005] do_syscall_64+0xbb/0xf80 [ 521.669528][T14005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.675432][T14005] page last free pid 12 tgid 12 stack trace: [ 521.681413][T14005] __free_frozen_pages+0xbf8/0xd70 [ 521.686544][T14005] __slab_free+0x2ce/0x320 [ 521.690958][T14005] qlist_free_all+0x97/0x100 [ 521.695570][T14005] kasan_quarantine_reduce+0x148/0x160 [ 521.701025][T14005] __kasan_slab_alloc+0x22/0x80 [ 521.705869][T14005] kmem_cache_alloc_lru_noprof+0x35f/0x6c0 [ 521.711704][T14005] sock_alloc_inode+0x28/0xc0 [ 521.716390][T14005] alloc_inode+0x6a/0x1b0 [ 521.720712][T14005] __sock_create+0x12d/0x9d0 [ 521.725306][T14005] rds_tcp_conn_path_connect+0x2a3/0x6c0 [ 521.730949][T14005] rds_connect_worker+0x1d8/0x290 [ 521.735972][T14005] process_scheduled_works+0xaec/0x17a0 [ 521.741523][T14005] worker_thread+0xda6/0x1360 [ 521.746203][T14005] kthread+0x726/0x8b0 [ 521.750276][T14005] ret_from_fork+0x51b/0xa40 [ 521.754858][T14005] ret_from_fork_asm+0x1a/0x30 [ 521.759617][T14005] [ 521.761929][T14005] Memory state around the buggy address: [ 521.767570][T14005] ffff88806a2a8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 521.775641][T14005] ffff88806a2a8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 521.783696][T14005] >ffff88806a2a8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 521.791792][T14005] ^ [ 521.797951][T14005] ffff88806a2a8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 521.806025][T14005] ffff88806a2a8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 521.814087][T14005] ================================================================== [ 521.824341][ T24] em28xx 2-1:0.132: Closing input extension [ 521.864862][T14005] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 521.872300][T14005] CPU: 1 UID: 0 PID: 14005 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 521.882913][T14005] Tainted: [L]=SOFTLOCKUP [ 521.887262][T14005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 521.897335][T14005] Call Trace: [ 521.900658][T14005] [ 521.903609][T14005] vpanic+0x1e0/0x670 [ 521.907626][T14005] panic+0xc5/0xd0 [ 521.911379][T14005] ? __pfx_panic+0x10/0x10 [ 521.915825][T14005] ? preempt_schedule_common+0x82/0xd0 [ 521.921778][T14005] ? v4l2_fh_open+0xac/0x420 [ 521.926834][T14005] check_panic_on_warn+0x89/0xb0 [ 521.931922][T14005] ? v4l2_fh_open+0xac/0x420 [ 521.936613][T14005] end_report+0x6f/0x140 [ 521.940877][T14005] kasan_report+0x128/0x150 [ 521.945492][T14005] ? v4l2_fh_open+0xac/0x420 [ 521.950080][T14005] v4l2_fh_open+0xac/0x420 [ 521.954989][T14005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 521.961078][T14005] em28xx_v4l2_open+0x157/0x9a0 [ 521.966034][T14005] ? do_raw_spin_lock+0x12b/0x2f0 [ 521.971059][T14005] v4l2_open+0x1bf/0x3a0 [ 521.975304][T14005] chrdev_open+0x4cd/0x5e0 [ 521.979715][T14005] ? __pfx_chrdev_open+0x10/0x10 [ 521.984644][T14005] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 521.990974][T14005] ? __pfx_chrdev_open+0x10/0x10 [ 521.995904][T14005] do_dentry_open+0x7ce/0x1420 [ 522.000670][T14005] vfs_open+0x3b/0x340 [ 522.004733][T14005] ? path_openat+0x346e/0x3e20 [ 522.009581][T14005] path_openat+0x3486/0x3e20 [ 522.014181][T14005] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 522.019812][T14005] ? getname_flags+0xb7/0x540 [ 522.024496][T14005] ? __pfx_path_openat+0x10/0x10 [ 522.029428][T14005] ? __lock_acquire+0x6b5/0x2cf0 [ 522.034374][T14005] do_filp_open+0x22d/0x490 [ 522.038878][T14005] ? __pfx_do_filp_open+0x10/0x10 [ 522.043919][T14005] ? _raw_spin_unlock+0x28/0x50 [ 522.048786][T14005] ? alloc_fd+0x64b/0x6c0 [ 522.053134][T14005] do_sys_openat2+0x12f/0x220 [ 522.057843][T14005] ? __pfx_do_sys_openat2+0x10/0x10 [ 522.063054][T14005] ? exc_page_fault+0x6a/0xc0 [ 522.067731][T14005] ? do_user_addr_fault+0xc7c/0x1360 [ 522.073020][T14005] __x64_sys_openat+0x138/0x170 [ 522.077877][T14005] do_syscall_64+0xe2/0xf80 [ 522.082380][T14005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.088447][T14005] ? trace_irq_disable+0x37/0x100 [ 522.093472][T14005] ? clear_bhb_loop+0x60/0xb0 [ 522.098142][T14005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.104034][T14005] RIP: 0033:0x7f3a634a7407 [ 522.108445][T14005] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 522.128146][T14005] RSP: 002b:00007fffa26ef8f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 522.136560][T14005] RAX: ffffffffffffffda RBX: 00007f3a63bed880 RCX: 00007f3a634a7407 [ 522.144571][T14005] RDX: 0000000000000000 RSI: 00007fffa26f0f1c RDI: ffffffffffffff9c [ 522.152552][T14005] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 522.160548][T14005] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 522.168613][T14005] R13: 00007fffa26efb40 R14: 00007f3a63d54000 R15: 000055d71cac94d8 [ 522.176591][T14005] [ 522.180046][T14005] Kernel Offset: disabled [ 522.184363][T14005] Rebooting in 86400 seconds..